0240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020c2dbd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900400000000300000008000100020000000800050008c094845ff7380db9b101e1fa0000004a3a6f16d7c600c4bb"], 0x38}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x3000000000000}, 0x0) 16:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000074006000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 480.017869] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 480.017869] 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) 16:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002300001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) 16:10:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000007060b010000000000000000000000000500010004000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4c0e82, 0xb1) ioctl$CHAR_RAW_BSZGET(r1, 0x80081270, &(0x7f00000002c0)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x185, 0x2400) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24040010) 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 16:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000007a006000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 16:10:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10000, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 480.317151] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 480.317151] 16:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088016000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002c00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x8000000}, 0x0) 16:10:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c21000007060b00000000000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x1ff}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8095}, 0x40880) sysinfo(&(0x7f0000000240)=""/48) 16:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088026000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 480.645506] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 480.645506] 16:10:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0) 16:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000036000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000080)={0x2, 0x5, 0xffffff81, 0x5, [], [], [], 0x40, 0x2, 0x9ee, 0xffffff81, "547d05014ea1178f41608368f661de62"}) 16:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000003f00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 16:10:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088036000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x1c060000}, 0x0) 16:10:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 480.998960] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 480.998960] 16:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000004000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000056000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x3f000000}, 0x0) 16:10:17 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x410001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xd, 0x4, 0x4, 0x123, 0x0, r1, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8]}, 0x40) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/224, &(0x7f00000001c0)=0xe0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) 16:10:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088056000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0) [ 481.283555] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 481.283555] 16:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xe00000000000000}, 0x0) 16:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000006000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000066000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 16:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xf00000000000000}, 0x0) 16:10:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088066000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 481.584467] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 481.584467] 16:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000c0ed00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 481.834849] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 481.834849] 16:10:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xd9, "3aafbf12b10b6961a5f48ff1b0cd25d138aff96254826bce771b94ec7474717b130873bacb392103de7690e6e0ffe278889fc9e18aa719f43fc0258e58510f87e2e532772aee986a23e6e32af83a1efb5198801eb7753314ac3c776a997e1a941054dc1772d8244738c2210e8b4a0aa1a18431af19f57135740f258f71b85bbae6ebcf67fa9e54c85257b3f0e31012009cbe9dd7b18181eecba91b3d29dc6542d654d6555413f722c7b8bf97387b39324bd102e508d60a88750314d2e7ae72e69142f343a256281141b239895a13d69356f191e26e63cc83df"}, &(0x7f0000000180)=0xe1) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 16:10:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) 16:10:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000076000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fff000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x6000000000000000}, 0x0) 16:10:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088076000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="95e7bdd9b0418258fe5499c9849d9f00713dce5436dff84a3bf5e0"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}}, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r9 = signalfd(r2, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r9, r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008010}, 0x400c001) 16:10:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 482.609026] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 482.609026] 16:10:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000fff00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x8406000000000000}, 0x0) 16:10:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) 16:10:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088086000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 16:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 482.881096] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 482.881096] 16:10:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000096000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f0ff00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:19 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) r1 = getpid() r2 = getuid() sendmmsg$unix(r0, &(0x7f00000006c0)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="4108e5ec1d0a059c699e4f505cc745fece26290d35b69d3237840d9ec7edb0034d9c8e20df8505406651aaa8b4bfb9753bce0c3ecf8a23505dfe24395ae6cdd8e425", 0x42}, {&(0x7f0000000340)="591a78abeb60b4c2d6897eb87de819c03aee42989b1103bd01147c7ec9d8215b41ca41efb9c2e72f699bb6c7e94f1ee623d01486ee972718e0f405d28eb23ef352e18d72570a9cd69e160f280d2de8830db90ba4be6140056c6d8520afba", 0x5e}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="0e6f2f947770b95e8779c2123dbdc6d8e04a5f3bb69dbece995797d46fa41767209bfaa2f2f6d1706a50f97fd47e1c8fe06890a73d951090108358f59c47e5b6ad95395048a3c599c568872edd6c785f18906efbdc8e6b38bbfb59ab7aafdb5de7475b8ba7cd7f87eab65aff8a", 0x6d}, {&(0x7f0000000500)="44dfa16e740d5cf1a997db3860dddc4c696072e2c630cb4d58839747a3d8dab4a14b2fd84773a7bf9c223b4addeeaaa5f07c2ded6a0f1572815136455627e9601266729c125671a22d204d", 0x4b}, {&(0x7f0000000580)="fe906ed69d4c51431baaacd62ae64fe182e8b7f54a1ab0a87f4ef1d01140412cc7fcec7bb5c32ad541492deb5649aa0fede847a616bae31b7a49bedfd5c97d89b44bf549c02b85b64d95296f9a466cc2839dbd751b629b74cde22847e892293528be83378fffe4184b442c94304a3c678c5cd4200ef48a24e8166f075231c0be2915ae7fafa97b5944641a4750b1e26d84c28b332b9db27e2e06e8797c0832d4f0729c1d7104c21386506448390f31", 0xaf}], 0x6, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xffffffffffffffff}}}], 0x20, 0x20048801}], 0x1, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x101000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x80000001, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000000780)=""/247, &(0x7f0000000880)=0xf7) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x6, &(0x7f0000ffa000/0x3000)=nil, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000000700)) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x3000000000000}, 0x0) 16:10:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 483.192589] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 483.192589] 16:10:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 16:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) 16:10:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000880a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = socket$inet(0x2, 0x8, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 16:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 16:10:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000b6000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 483.484275] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 483.484275] 16:10:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000010001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) 16:10:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000880b6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 483.741318] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 483.741318] 16:10:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1c0}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x80) 16:10:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000ffff1f001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:10:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf250100000008003a141a0900000800020002000000080001000100000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) 16:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 484.025528] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 484.025528] 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000880c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16:10:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) 16:10:20 executing program 1: syz_read_part_table(0x100000001, 0x4, &(0x7f0000001780)=[{&(0x7f0000000580)="7ae91aead76efe91dbe779d24feda79f05bca44cf33731a59487a30e170c042484516483d6655fde3dad3bc6a755467cc2959f72322895625a957963afa4fc6edd3660a713a929903633a705abef3c2ac4e1378a5b", 0x55, 0x3}, {&(0x7f0000000600)="011660b2cc7186c7f8faa47a965dafa24da3521db437d772ac30cee237f3d289110796cc50673922923566b9d37a1b6f5d228282dfddd0e6f8eafe2b4d66d83569df91f93c165ae471bf2095611381485306405ee01f0ac4aac78a01de83d9d9e37d1f137db9dd33e193a9ceef87c13081d0912cee7e520dd2edaf7be64bb33a65f85510ee4e8a6157a3fccb34701a45e2f3d3ebc3145957870f37ee953bf6fea82adfeeeeeae4733af8326d0b298ba171b9bb19546062a394af8b644f4103b23e41c61ed5b0ad8a69ecf6adeeefaa36a8018f1a4576dce7f7", 0xd9, 0x2}, {&(0x7f0000000700)="191dc6cee9962a4443796051e4167850e0ed94f8e08801f3759e59a2cac037843b768a557c72da69a5f513b81cbc41ee72da2f7af0e4c33873d1170155000b3dc855625cb5a65c2877b4ee796fe57e6ae83536e088b9c6dd8cdcb117dbe0450edf7d74f06b06", 0x66, 0x40}, {&(0x7f0000000780)="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", 0x1000, 0x7}]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070617000000000000000000000000000500010006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x100) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000]}, 0x8) dup(r0) syz_mount_image$v7(&(0x7f0000000340)='v7\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="598a28c62b527671886cd494a4d04738bb82bce2d67d3df0fc72aacb93ce8baf78398904dc35cb9a1851aef9321a99e6e6f701d86a99d8191a3d1852b2abd81c5ddb69ad8d2508bf0997f224510508beaa8dad8a975e242f49bb685ea36a4a7bb1220dcaf26f20526ee92776b1434cf6c22f154e322ba37be7dfa99c692901e46de62c7d0b7df3561251b5a8e4eaeba37368564617219f0cf6647b9e18c219fc102f38ac2962d083eeed8cbb3bde11434b6f844c074d0f2c0d25b2457a1e52", 0xbf}], 0x0, &(0x7f00000004c0)={[{'netdevsim\x00'}, {',@*^)+'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'netdevsim\x00'}}, {@permit_directio='permit_directio'}, {@euid_gt={'euid>', 0xee01}}, {@appraise='appraise'}, {@audit='audit'}]}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1266}, {0x8, 0x13, 0xfdb}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000d6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 16:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 484.332757] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 484.332757] 16:10:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x88c0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x5d1143, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xfe, 0x5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="00a0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x24) dup(r4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000f574ef000000000002000000455af437131e5d8d55585f6ff54e1d6cfe049889416c6aa27cb9d07290b853876ffa7f117839000000000000000000001700"/94], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000006b6b6b001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000880e6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xe00000000000000}, 0x0) 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000880f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x6, {{0xa, 0x4e20, 0x7, @remote, 0x2}}, {{0xa, 0x4e23, 0x2, @mcast1, 0x6}}}, 0x108) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80283000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000}}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010010}, 0x8c0) [ 484.608169] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 484.608169] 16:10:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 16:10:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000ffff80001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xf00000000000000}, 0x0) 16:10:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088126000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xe}, 0x0) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x1c06000000000000}, 0x0) [ 484.919357] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 484.919357] 16:10:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r3, 0x1ff}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, &(0x7f00000000c0)=0x4) 16:10:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088156000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000011000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 16:10:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088166000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x14400, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x6000000000000000}, 0x0) 16:10:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000021000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088176000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 16:10:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x1, 0x4, 0x1f) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) fcntl$getown(r0, 0x9) 16:10:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088186000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 16:10:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x880, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x2018, 0x4) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='macvlan0\x00', 0x7, 0xffff, 0x3}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff, 0x0, 0x1010}, 0x0) 16:10:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000088196000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 16:10:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x684}, 0x0) 16:10:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000041000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000881a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80800) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 16:10:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000881b6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 1: setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/63, 0x3f}, &(0x7f00000000c0), 0x29}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff7f10}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000881c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)=""/4096, &(0x7f0000000180)=0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000083980b0100f3ffffffffffffff0000000500010023000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x6c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_LABELS_MASK={0x24, 0x17, [0x3, 0x1f, 0x80000001, 0x0, 0x15, 0x9, 0x4, 0x9]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x54e8f09f6e1fbe33}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x4000840) 16:10:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000001f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x10000, 0x6, 0x3de000, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0xf0ffffff, 0x0, 0x10}, 0x0) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000206000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8406}, 0x0) 16:10:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x53008148}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:10:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000246000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 16:10:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) 16:10:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0xb69, 0x7, &(0x7f0000001540)=[{&(0x7f0000000080)="d7258aecece1706d2c956b4b7908c1f8aa33e6a0cfd8d22c9965fb802295f456ed39be66c4128ac766da78e06c285212642a418e856f413102373f90ca", 0x3d, 0x100000001}, {&(0x7f00000000c0)="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", 0x1000, 0x1}, {&(0x7f00000010c0)="eba951646cd8ca6223d827338a52983dfbfec84ab1a0eaafc046e1cf7034171112dc3d194d0b581e36c934699be3b506a75b46d9556e64a0b2462a2e98a7aa2d011f33f9bba8c2efc228d2df7f664eca3b7cb89e9d8f982947615c4f0ce56e86c2b16dbe0d06c1", 0x67}, {&(0x7f0000001140)="48803865f3c3df0c637aa9076224bb17f46420a306545b61691e86289b4300718ceecda6e16ea1061e9d297f323ac261e772fce826b2e211bd3f4664f4b8c07198c0ddf9ad05c7f9cd1971a24ab33e9373ad18384a48e1f9a0033851f15f8cf5593cb2a5f1d431a3527253628ed5e9e052c5550de47e74170122414a22c905aa6fcbcbc9fc251453f12e81e8e58edb22ca58132962867d8a9286c335a4f2757e8f4cc58eafe9ddf9e30592e3d6f17935b49f102870c8da090963b6fc3a852c6191ef81902cb995b5e55d94143d700c2c62aa782ebe62175d802b09deac2a0694108d3c3e3932ed5eefc5", 0xea, 0x27b5}, {&(0x7f0000001240)="e7d1d99a75dd647e7379888722684807e48d4c691438efcfc249ab14d97ee886fa503501cdcabe408bdb879a0c5a5ca2671efb1b2b7421f1d82ec16800f0fca6919044e9c3615235110dcedd2519633c414878fe5d263dc41e2518950cc08b2d55f5e1d729426afe62486cbbaa7a281b341db4eff64c8288309a252fdd49b56a618cbbc296e19ff03098ba1b54500d4e0137b20174a51d4103ab3f353b77701f44aad995fb803c96279650ade996b141ad317d615e0507b9db2fa4b0059ae7484c19a9f72b17fddc6d9e4a002e1890d6695fdb0b9d", 0xd5, 0x7fff}, {&(0x7f0000001340)="5210481d2f724b75c32bf32760f5ff964e4f2bba470e19770a19cea5e5fcfc378da2a50bb8c1139dc18357ac4e1890c007248687bc885bbbbe33efa7909a9affa66155f0e66ba0dd6d596aa6ffb2bb35c5c1dc69b4d5b314f4edd93285b49c2c8e565e10e0ebde544700703e7d8ba37da99b4320286e3125bda141f77c559fd686214a480905ddc5d1bf38086d99ce71b34f0c62585c8131a58fb97a3cd0db4e807c769687d3761fe8c689a22613fc842a240b67aa58ec1513dab291802c173d77c03112f4f248d89ad6027444ff13342575e73e78f3069ecaef", 0xda, 0x8}, {&(0x7f0000001440)="f922a7d28199b0f66746d088e062ab8bbc7aef6b1c4b8da5d3c64df10f563cfc0f4b8160fe4ce797fa3981b4b4d346d678259b0f5df4345b510616f2b80829f9d4ccb54ccdd14e1bfd8f4c3532c18ae677809eefbd53f774b3fc8c60ed28b930d0ff8f911f3e58f5445f5138801c2a2b5ff70ad54400b51bdd669708aa2aeaf327d939e9dfdf91c01ff36e4312f1db65c144bdffa6852f21a0b64cd43fca7d52916c1cbb9d4b95a4311aca7e9ebde8de6baf96b21e3ecc959309e41c4617b6f8ae9f416326263f72306a4014492a38f1e79b72b2b2489711c0f44a0b2704f92abc", 0xe1, 0x8}], 0x1000, &(0x7f00000016c0)=ANY=[@ANYBLOB="29a92d2d2c2a2521295c407d28275e2b5c2c2d5c5d2e2c282f2b5d2c5d2cde252c2c2a2d292c232c7b2b282c7375626a5f747970653d2c657569643e", @ANYRESDEC=0xee01, @ANYBLOB="2c7365636c6162656c2c124346b2784d056565ffd2a2d8648ee791a16ee30a404ed91a438e66665f752c7569643e", @ANYRESDEC=0xee01, @ANYBLOB=',subj_usRr=$0000000052,\x00'/39]) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000256000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000003f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe}, 0x0) 16:10:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 16:10:23 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x8040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x1, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x801}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x998c9f202905e8b9}, 0x800) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000080)="63eff5b175b98f4ff87b5d91078f9881ff71d6afa4ad946ddddcbe829377e08c1c63d60f7bcd9dc30112afee18e945d5c069b4d8c273ed6eddc32496d4da0055a775115103f96ab4ac9eab0ce9b6e2c1ca287ffcea543d2153f38d9f1711c53168ecad8083d724bc113af0caad3e412b0fe978ca2452ba4d5a9bf137a8a8209f3df25589fd30b38d4ed8ccb05bc9404dc7b5135fe657664d22fc45e2a77a249a2e4356e3cb03c8da1b90d9e8162b69c44e3dfd2dfd31e7600f8c8571561514e625f77e9632394d06d42eef195173e73adbfa0b2cca30f6feaabcb9d209b7faaf05aef38e1e2fa2a168aa47e46f4f4f28e5112c8143c9c3413e31da0207168a8c") sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20008910) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0xffff, 0x9, 0x9, 0x6, 0x3]}, 0xe) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000486000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) 16:10:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000007060b010000000000000000000000000500010006000000c3c6ed0edfb60db9b7792b1bc3103ea6fabb4b9a555c58dfa4b9da59eae5b46aa5ce69dba279058cd7cffbaa47775fe8b7a2acda7776fa3389b36dfd5aa6a6b77d3471cfcf42537ee3094c7593e0afe96a10f0c8870aaf9e9a2b7fbad51fc192d1334634d338fefdb4e60853e9d54db71b2f43f40e01d5ee9637017d602e30a22ab2c4a40254d6daa62dd146490eb46788f8b0ac5e8eac46e2fffffffffffffffffdc316e939d71902e92e1e0ad0f2742ae67cac8cc323000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7, 0x248600) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x4, 0x3000, 0x81, 0x5, 0x20}) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000004c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) 16:10:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b010000040000000000000000000500010006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000606000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 16:10:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 16:10:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000101000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x41) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000686000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) 16:10:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 16:10:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b010000000000000000007f00000500010006000078"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000006c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000001f1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x61c}, 0x0) 16:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000706000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 16:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060b2e000000009c3682134cf1602ac2579dbe84ad00f66e418a0000000500010006000000059e51b6c9c26c056a0d92d7a7c139f5f6af9b975f9b3bb498bf5c4ab2509f203a3f79a9f81060e84ba2"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'macvlan1\x00', {0x7}, 0x800}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'vlan0\x00', {}, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r2, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r1, 0x0, 0xffffffffffffffff, 0x481}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r1, 0xb4, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000003c0)={{0x0, 0x3, 0x20, 0x2, 0x3}, 0x5, 0xd8, 'id1\x00', 'timer1\x00', 0x0, 0x80, 0x9419, 0x100, 0x2}) dup2(r4, r3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r1, 0x0, r3, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x1, r6, 0x8}) 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000746000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000201000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 16:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000007a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 488.263299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1c06}, 0x0) 16:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16:10:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000221000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 488.407081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000008f7e6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)={0x0, 0x0, [], [@pad1]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x8, 0x70bd24, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4002001) 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 16:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000008f7f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 16:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000073ef3ffffffffffff000000000001000500010006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000080)="8ccd5b662d7741baa1f6e0c9a24b7748be807f1e8596c7936a3dec5aed0fac6ae7b86943bae39b031ddc352c21176e09f027d3a3074aae23901bae66b6c071b747cf9d1c9eb3c0f420aa579807e78a1e3c8079894e414f9e0316aff22b7454704f729ce0accda2f73eeae5868366375273dde47ed467c6248b1782", 0x7b) 16:10:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 16:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706ed00000000000000000000000000050001000600000286ebec48a85ec5123bfe6e3da1d8e611cb0df7"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 16:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000001886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff, 0x0, 0x80800}, 0x0) 16:10:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000002886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(r1, &(0x7f00000000c0)={[0x7]}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x134, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2800000}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf1a}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000003886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 16:10:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003f1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 16:10:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000005886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0xf0ffffff, 0x0, 0x4004}, 0x0) 16:10:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000401000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b01000000000000e9b3839400000500010006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0xb0440) 16:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84060000}, 0x0) 16:10:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000006886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000080)={@bcast, @null}) 16:10:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000007886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 16:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 16:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b01000000000000000000000a000000000006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000006b6b6b1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000008886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 16:10:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 16:10:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b010000000000000000000000000500190006000000c71966d41c8b2d62149c6adf609339e595a1804bfd15c75bf67e5057c2d7a648e63b915608675ac1ce6f40a72a5267f6dc441e654c000ac29e2d2be6ea3c8382e167a8f3808025026b97ec838d9e0d98b37c293c7afb4ab2fa936c587483409900c9bef01201366a4f6ce29f8cf52197e2b8db7192de4d0a1fb036ecfd12673795c5449098d3a4d8419ad38a47abf6162b0f14025528091edf2d6076912c661f743757fdba7293f2fc05b1bb8d488434684bc11fcee4fabb"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 489.997754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000a886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16:10:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000ffffff8c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000b886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 16:10:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x1, &(0x7f0000000080)) r2 = getpid() tkill(r2, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x1}) write$char_raw(r4, &(0x7f0000000400)={"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"}, 0xa00) 16:10:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000edc01000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000c886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x145900, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000002c0)=""/113) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x3, 0x1000, 0xf3, &(0x7f00000000c0)="72ab27cb0b7794ec15e2df0294359aeaddb82265e2b3dbf5aa04575ee2590329a212549d1ec4424319ad61bbd0f1d87faf1996847ee149282aa1ecac5352b25068bb52e86f1fa759bdf1c2b88bcc3edccbfe3dce0b5397ea8b12c69c808930cb368d1949aa45e87c82884dcde82e848261a1b8d1b3330973d707af1f6f8758e2864ca095a73847a99ccacb5d0962737abd4a581f72675cfdc17497dc84cf2bc00fbad14c7e3253e17f43755730b7955e454f6c4765282ebad52b33f183796992e8b9b5a91256445251a3b2bfc6fc9b4de4f5d61da1d5d4ee5ddc81a6fe03ca0f7dc264463ff42602a37fa31724e642f3671837", 0x2e, 0x0, &(0x7f00000001c0)="190c4976d3cad1ec7ed0e0d55a7cd94261a1a17637974f4349a1d4bd9073349500bdd6e69544b261fbc4a3705aac"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060b010000000000e100000a0000000500010006000000"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 16:10:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000e886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff01000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 16:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000f886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x10b}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 16:10:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000012886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1c060000}, 0x0) 16:10:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff41000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x1c}, 0x1, 0xf0ffffff, 0x0, 0x20040000}, 0x20000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/171) 16:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000015886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 16:10:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x2, @vbi={0x80, 0x2, 0xffffff74, 0x32435750, [0x8000, 0x9], [0x80000000, 0x4], 0x1}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007060b0100000000000000000000000005415c1b59c08b57236e5801000600554a3b247300858e2922a2d5962f435b2fc1886f70a7ece186ada20211f3bbe75a4864186507"], 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 16:10:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff51000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000016886000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 491.269540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:10:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 16:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x2) [ 491.339606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000017886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x53008148}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 16:10:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff61000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000018886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3) 16:10:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x53008148}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 16:10:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 16:10:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffffb1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000019886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x4) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x53008148}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 16:10:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 16:10:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x8) 16:10:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000001a886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffdfc1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 16:10:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000001b886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xe) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffdfd1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 16:10:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000001c886000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf) 16:10:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 16:10:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000007e8f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffffe1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 16:10:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000007f8f6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x60) 16:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000fff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000002000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x2) 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf0) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 493.032067] sd 0:0:1:0: [sg0] tag#4084 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 493.040936] sd 0:0:1:0: [sg0] tag#4084 CDB: Variable length, sa=0x0 [ 493.047531] sd 0:0:1:0: [sg0] tag#4084 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 493.056665] sd 0:0:1:0: [sg0] tag#4084 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 493.065612] sd 0:0:1:0: [sg0] tag#4084 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000001fffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3) [ 493.074625] sd 0:0:1:0: [sg0] tag#4084 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 493.085132] sd 0:0:1:0: [sg0] tag#4084 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 493.094475] sd 0:0:1:0: [sg0] tag#4084 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 493.103416] sd 0:0:1:0: [sg0] tag#4084 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 493.112360] sd 0:0:1:0: [sg0] tag#4084 CDB[70]: 00 00 20 00 00 00 00 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x300) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000026000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x4) 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x684) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000036000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000080ffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xe00) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x8) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000046000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf00) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000056000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xe) 16:10:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fcfdffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3f00) 16:10:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000066000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf) 16:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fdfdffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x60) 16:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x6000) 16:10:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000076000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf0) 16:10:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000086000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x8406) 16:10:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000007fffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x300) 16:10:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000096000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf000) 16:10:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x61c) 16:10:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000008cffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x30000) 16:10:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xe00) 16:10:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f0ffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x34000) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x2000, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f4ffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x400300) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf00) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000b6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x1c06) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf0ffff) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f5ffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000d6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x1000000) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3f00) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @netrom, @netrom, @default, @default, @null, @default, @netrom]}, &(0x7f00000000c0)=0x48) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f6ffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000106000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x6000) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x2000000) 16:10:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fbffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000246000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf000) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3000000) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000256000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000feffffff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x30000) 16:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x4000000) 16:10:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000486000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x34000) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000004c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x8000000) 16:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000100000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000606000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x400300) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xe000000) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000686000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000100000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf0ffff) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000006c6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf000000) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x1000000) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000706000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000d00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3f000000) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x2000000) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000746000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x60000000) 16:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000200001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000001010200000000000000000c0000000800154000000002007166f1c29f36ea0f7d99ec17f8fbfa5e84d81c651a3eb2d3fb944e010471869fc058c9dc3b470db8b5a13a36adff771b1186ab70903fc88b8955aa2b616fa9d84c61816a377aafa52f494ea131723d937fed4f1ff54cba3d36f059c675ba2fd068406e3cf40c778b7f9441fcde396ae7ac8e40f4abdd7acf22384ae7566726959279a4c11a1876618d9491c51623df72e4dbae3fabd1d2c3765d70f808d0f97b5a18860ef9d3a71e8fd7e4582cb623cdd7b01bcc09205459aeeeb29c4d88a0e1d98d26812977f92e868af683561ed03b5d69183cd50fa31970ffceefb0f9a468e4a6d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000811) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000007a6000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3000000) 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x84060000) 16:10:32 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x4000000) 16:10:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006100002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 496.742985] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 496.742985] 16:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x9effffff) 16:10:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000300001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 496.896776] sd 0:0:1:0: [sg0] tag#4085 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 496.905926] sd 0:0:1:0: [sg0] tag#4085 CDB: Variable length, sa=0x0 [ 496.912556] sd 0:0:1:0: [sg0] tag#4085 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 496.921515] sd 0:0:1:0: [sg0] tag#4085 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 496.930409] sd 0:0:1:0: [sg0] tag#4085 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x8000000) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf0ffffff) [ 496.939401] sd 0:0:1:0: [sg0] tag#4085 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 496.953145] sd 0:0:1:0: [sg0] tag#4085 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 496.962504] sd 0:0:1:0: [sg0] tag#4085 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 496.972807] sd 0:0:1:0: [sg0] tag#4085 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 496.982038] sd 0:0:1:0: [sg0] tag#4085 CDB[70]: 00 00 20 00 00 00 00 16:10:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006300002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000400001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 497.044922] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 497.044922] [ 497.186954] sd 0:0:1:0: [sg0] tag#4086 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 497.195951] sd 0:0:1:0: [sg0] tag#4086 CDB: Variable length, sa=0x0 [ 497.202566] sd 0:0:1:0: [sg0] tag#4086 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 497.211536] sd 0:0:1:0: [sg0] tag#4086 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 497.220439] sd 0:0:1:0: [sg0] tag#4086 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xfffff000) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xffffff7f) 16:10:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xe000000) [ 497.229402] sd 0:0:1:0: [sg0] tag#4086 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 497.238345] sd 0:0:1:0: [sg0] tag#4086 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 497.247320] sd 0:0:1:0: [sg0] tag#4086 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 497.253696] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 497.253696] [ 497.256280] sd 0:0:1:0: [sg0] tag#4086 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 497.273777] sd 0:0:1:0: [sg0] tag#4086 CDB[70]: 00 00 20 00 00 00 00 16:10:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000500001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xffffff9e) 16:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf000000) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xfffffff0) [ 497.491895] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 497.491895] 16:10:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000009800002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x1c060000) 16:10:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000600001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3000000000000) 16:10:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x40030000000000) [ 497.774850] sd 0:0:1:0: [sg0] tag#4153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 497.775052] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 497.775052] [ 497.783828] sd 0:0:1:0: [sg0] tag#4153 CDB: Variable length, sa=0x0 [ 497.798805] sd 0:0:1:0: [sg0] tag#4153 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 497.807776] sd 0:0:1:0: [sg0] tag#4153 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 16:10:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3f000000) 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 497.816716] sd 0:0:1:0: [sg0] tag#4153 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 497.825681] sd 0:0:1:0: [sg0] tag#4153 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 497.834609] sd 0:0:1:0: [sg0] tag#4153 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 497.843562] sd 0:0:1:0: [sg0] tag#4153 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 497.852511] sd 0:0:1:0: [sg0] tag#4153 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 497.861437] sd 0:0:1:0: [sg0] tag#4153 CDB[70]: 00 00 20 00 00 00 00 16:10:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006100002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf0ffffffffffff) 16:10:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000700001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x60000000) [ 498.060417] sd 0:0:1:0: [sg0] tag#4154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 498.069316] sd 0:0:1:0: [sg0] tag#4154 CDB: Variable length, sa=0x0 [ 498.075879] sd 0:0:1:0: [sg0] tag#4154 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 498.084826] sd 0:0:1:0: [sg0] tag#4154 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 498.093746] sd 0:0:1:0: [sg0] tag#4154 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x9effffff) [ 498.102673] sd 0:0:1:0: [sg0] tag#4154 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 498.111600] sd 0:0:1:0: [sg0] tag#4154 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 498.120474] sd 0:0:1:0: [sg0] tag#4154 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 498.129421] sd 0:0:1:0: [sg0] tag#4154 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 498.138392] sd 0:0:1:0: [sg0] tag#4154 CDB[70]: 00 00 20 00 00 00 00 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x100000000000000) 16:10:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006300002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 498.160000] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 498.160000] 16:10:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000900001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 498.309394] sd 0:0:1:0: [sg0] tag#4155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 498.318462] sd 0:0:1:0: [sg0] tag#4155 CDB: Variable length, sa=0x0 [ 498.324980] sd 0:0:1:0: [sg0] tag#4155 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 498.333893] sd 0:0:1:0: [sg0] tag#4155 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 498.342813] sd 0:0:1:0: [sg0] tag#4155 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf0ffffff) 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x200000000000000) [ 498.351730] sd 0:0:1:0: [sg0] tag#4155 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 498.360625] sd 0:0:1:0: [sg0] tag#4155 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 498.369536] sd 0:0:1:0: [sg0] tag#4155 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 498.378452] sd 0:0:1:0: [sg0] tag#4155 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 498.387364] sd 0:0:1:0: [sg0] tag#4155 CDB[70]: 00 00 20 00 00 00 00 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xfffff000) 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 498.460181] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 498.460181] 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xffffff7f) 16:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x300000000000000) 16:10:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000b00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xffffff9e) 16:10:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000009800002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x400000000000000) 16:10:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 498.737036] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 498.737036] [ 498.833438] sd 0:0:1:0: [sg0] tag#4156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 498.842506] sd 0:0:1:0: [sg0] tag#4156 CDB: Variable length, sa=0x0 [ 498.848976] sd 0:0:1:0: [sg0] tag#4156 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 498.857951] sd 0:0:1:0: [sg0] tag#4156 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 498.866897] sd 0:0:1:0: [sg0] tag#4156 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000c00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x800000000000000) [ 498.875842] sd 0:0:1:0: [sg0] tag#4156 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 498.884795] sd 0:0:1:0: [sg0] tag#4156 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 498.893735] sd 0:0:1:0: [sg0] tag#4156 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 498.902676] sd 0:0:1:0: [sg0] tag#4156 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 498.911604] sd 0:0:1:0: [sg0] tag#4156 CDB[70]: 00 00 20 00 00 00 00 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xfffffff0) 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xe00000000000000) [ 499.022478] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 499.022478] 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3000000000000) 16:10:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000001000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006002002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf00000000000000) 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x40030000000000) [ 499.311588] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 499.311588] 16:10:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002200001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf0ffffffffffff) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x3f00000000000000) [ 499.502282] sd 0:0:1:0: [sg0] tag#4087 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 499.511346] sd 0:0:1:0: [sg0] tag#4087 CDB: Variable length, sa=0x0 [ 499.517808] sd 0:0:1:0: [sg0] tag#4087 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 499.526756] sd 0:0:1:0: [sg0] tag#4087 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 499.537502] sd 0:0:1:0: [sg0] tag#4087 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x100000000000000) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x6000000000000000) [ 499.546813] sd 0:0:1:0: [sg0] tag#4087 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 499.555756] sd 0:0:1:0: [sg0] tag#4087 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 499.564694] sd 0:0:1:0: [sg0] tag#4087 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 499.573622] sd 0:0:1:0: [sg0] tag#4087 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 499.582566] sd 0:0:1:0: [sg0] tag#4087 CDB[70]: 00 00 20 00 00 00 00 [ 499.633774] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 499.633774] 16:10:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x200000000000000) 16:10:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006003002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002300001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x8406000000000000) 16:10:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x300000000000000) 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 499.994110] sd 0:0:1:0: [sg0] tag#4088 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 500.003307] sd 0:0:1:0: [sg0] tag#4088 CDB: Variable length, sa=0x0 [ 500.009772] sd 0:0:1:0: [sg0] tag#4088 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 500.018775] sd 0:0:1:0: [sg0] tag#4088 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 500.027728] sd 0:0:1:0: [sg0] tag#4088 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x400000000000000) [ 500.036677] sd 0:0:1:0: [sg0] tag#4088 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 500.046904] sd 0:0:1:0: [sg0] tag#4088 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 500.056129] sd 0:0:1:0: [sg0] tag#4088 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 500.065076] sd 0:0:1:0: [sg0] tag#4088 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 500.074012] sd 0:0:1:0: [sg0] tag#4088 CDB[70]: 00 00 20 00 00 00 00 16:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x9effffff00000000) 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 500.097131] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 500.097131] 16:10:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002c00001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xf0ffffff00000000) 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x800000000000000) 16:10:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006004002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xffffff7f00000000) 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 500.316115] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 500.316115] 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xe00000000000000) [ 500.406155] sd 0:0:1:0: [sg0] tag#4157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 500.415253] sd 0:0:1:0: [sg0] tag#4157 CDB: Variable length, sa=0x0 [ 500.421763] sd 0:0:1:0: [sg0] tag#4157 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 500.430782] sd 0:0:1:0: [sg0] tag#4157 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 500.439663] sd 0:0:1:0: [sg0] tag#4157 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf00000000000000) 16:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xffffffff00000000) 16:10:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000006000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 500.448579] sd 0:0:1:0: [sg0] tag#4157 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 500.457517] sd 0:0:1:0: [sg0] tag#4157 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 500.466435] sd 0:0:1:0: [sg0] tag#4157 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 500.475362] sd 0:0:1:0: [sg0] tag#4157 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 500.484278] sd 0:0:1:0: [sg0] tag#4157 CDB[70]: 00 00 20 00 00 00 00 16:10:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006005002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x1c06000000000000) [ 500.681651] sd 0:0:1:0: [sg0] tag#4158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 500.690507] sd 0:0:1:0: [sg0] tag#4158 CDB: Variable length, sa=0x0 [ 500.697158] sd 0:0:1:0: [sg0] tag#4158 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 500.706123] sd 0:0:1:0: [sg0] tag#4158 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 500.715074] sd 0:0:1:0: [sg0] tag#4158 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0xfffffffffffff000) [ 500.724089] sd 0:0:1:0: [sg0] tag#4158 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 500.733059] sd 0:0:1:0: [sg0] tag#4158 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 500.742012] sd 0:0:1:0: [sg0] tag#4158 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 500.750975] sd 0:0:1:0: [sg0] tag#4158 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 500.760294] sd 0:0:1:0: [sg0] tag#4158 CDB[70]: 00 00 20 00 00 00 00 16:10:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 500.788429] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 500.788429] 16:10:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x3f00000000000000) 16:10:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000f000001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0xae01) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00#\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x6000000000000000) [ 501.050791] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 501.050791] 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x9effffff00000000) 16:10:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006006002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000003001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r2, 0x20, 0x0, 0x800000, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xf0ffffff00000000) [ 501.297824] sd 0:0:1:0: [sg0] tag#4159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 501.306780] sd 0:0:1:0: [sg0] tag#4159 CDB: Variable length, sa=0x0 [ 501.313313] sd 0:0:1:0: [sg0] tag#4159 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 501.322272] sd 0:0:1:0: [sg0] tag#4159 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 501.331210] sd 0:0:1:0: [sg0] tag#4159 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 501.340184] sd 0:0:1:0: [sg0] tag#4159 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 501.349134] sd 0:0:1:0: [sg0] tag#4159 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 501.358093] sd 0:0:1:0: [sg0] tag#4159 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 501.367134] sd 0:0:1:0: [sg0] tag#4159 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 501.376074] sd 0:0:1:0: [sg0] tag#4159 CDB[70]: 00 00 20 00 00 00 00 16:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc000, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x4, 0x2, 0x3, 0x7, 0x8, 0x8, 0x0, 0x9, 0x7, 0x29, 0x1, 0x5}, {0x6000, 0xf000, 0xc, 0xff, 0x16, 0x1f, 0x37, 0x5, 0x0, 0xce, 0x7, 0x9}, {0x2000, 0x2000, 0x3, 0x1, 0xc5, 0x9, 0x1, 0x4, 0x8, 0x3f, 0x8e, 0xfb}, {0x6000, 0x10000, 0x10, 0x61, 0x3f, 0x80, 0x5, 0x6, 0x3, 0x0, 0xc0, 0xfb}, {0x3000, 0x6000, 0xc, 0x0, 0x3f, 0x5, 0x9, 0x40, 0x1, 0x0, 0x40, 0x80}, {0x5000, 0x2000, 0xe, 0x5, 0x80, 0x9, 0xf7, 0x7, 0x7f, 0x9, 0x5, 0x2}, {0x4, 0x4, 0xb, 0x9, 0x1f, 0x6, 0x7, 0x3f, 0x4, 0xa2, 0x1f, 0x40}, {0x5000, 0x3000, 0xd, 0x81, 0x1, 0x3, 0x80, 0x0, 0x7, 0x9, 0x3, 0x8}, {0x3000}, {0x5000, 0x8}, 0x22, 0x0, 0xf000, 0x400000, 0xd, 0x0, 0x6000, [0x2, 0x100000001, 0x101, 0xc2]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) [ 501.416795] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 501.416795] 16:10:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000005001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xffffff7f00000000) 16:10:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006007002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000280)={0x1, 0x0, "d6a4eb35325db241da826c1b5cc547cb6e92d132869162ac262618520cdb698a9ec55b58adacd168dd85cb9ff2eccf8a91e0027beceeef8fc2a4b9eb38b568370092a10a4ac8bc58ca3a1c642894ac14d78e64dfa5c9aa51568a1f16d702cbc680b1cfd3000def37b19f7669047e199b1861dd11aca3b7088fb8b6da65d0e72d39533e4673e501"}, 0x8f, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x2000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)={@local, 0x0}, &(0x7f0000000700)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x801400}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x124, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x1f, 0x80, 0x0, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x80, 0x78d0, 0x3f, 0x80000000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x15}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 16:10:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xffffffff00000000) [ 501.654526] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 501.654526] [ 501.696462] sd 0:0:1:0: [sg0] tag#4160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 501.705382] sd 0:0:1:0: [sg0] tag#4160 CDB: Variable length, sa=0x0 [ 501.711933] sd 0:0:1:0: [sg0] tag#4160 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 501.720875] sd 0:0:1:0: [sg0] tag#4160 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 501.729824] sd 0:0:1:0: [sg0] tag#4160 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006008002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 501.738742] sd 0:0:1:0: [sg0] tag#4160 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 501.747670] sd 0:0:1:0: [sg0] tag#4160 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 501.756597] sd 0:0:1:0: [sg0] tag#4160 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 501.765522] sd 0:0:1:0: [sg0] tag#4160 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 501.774531] sd 0:0:1:0: [sg0] tag#4160 CDB[70]: 00 00 20 00 00 00 00 16:10:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x3, 0x1, 0x50, @ipv4={[], [], @private=0xa010102}, @private0, 0x7800, 0x8000, 0x8, 0x2}}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0xfffffffffffff000) 16:10:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000006001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 501.901605] sd 0:0:1:0: [sg0] tag#4161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 501.910414] sd 0:0:1:0: [sg0] tag#4161 CDB: Variable length, sa=0x0 [ 501.917178] sd 0:0:1:0: [sg0] tag#4161 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 501.926119] sd 0:0:1:0: [sg0] tag#4161 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 501.935051] sd 0:0:1:0: [sg0] tag#4161 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 501.943984] sd 0:0:1:0: [sg0] tag#4161 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 501.952925] sd 0:0:1:0: [sg0] tag#4161 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 501.961851] sd 0:0:1:0: [sg0] tag#4161 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 501.970776] sd 0:0:1:0: [sg0] tag#4161 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 501.979654] sd 0:0:1:0: [sg0] tag#4161 CDB[70]: 00 00 20 00 00 00 00 16:10:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r2, 0x1ff}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') pause() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x20000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT=0x0, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000054}, 0x2000c040) 16:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b60000025084fedaabe0c8005c8b2a1c9a74bb8c526f55833792e2cd4216b9", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) [ 502.072812] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 502.072812] 16:10:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x400, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000007001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006009002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c33477cc6d48dc3624d6c3aa1fe08ecc6a7e87665b4fa46ff", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 502.310945] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 502.310945] 16:10:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000009001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600a002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000280)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c82e3000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 502.557711] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 502.557711] 16:10:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012dbd7000ffdbdf250c0000401400028105000d000000000006000b29d32dff0700000400c3eb3f6854999268d7dabceb1fe4b3405aac9a65f2492183557ea66e70f2c3cd821e7edd0e8579dc2a129a5f3699cd6c0309d504fd19cf40c9fcabcb5ae148bc2f5a3fb638587c718f393971d6194a9ef3decb28906f088651ae3c262a5337a15ee696c0da5913971af833e091bda9bf91fe1d162ff6fc144d2710eeeaa7f16f6d47e226943804a7a6d45efd8738331e98b1ed8cf12fedd036acd97089"], 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x20000010) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2d, 0xdb, 0x6, 0x5, 0x10, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x1, 0x1000, 0x3}}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000068257a062a1be2913cf81041b027641db842a4f540ad144058b9f238b2556151fa5e366df5cef2fa7ca2c9a6efc4646a39852050780d0389fe79f6c6ecd241f257f015fb4c9d67204a63bba154596236c1", @ANYRES16=r2, @ANYBLOB="000227bd7000fddbdf251d0000001c00238006001800b62c000006000400f400000005000800030000000c00990009000000000000001400238005000f000700000008001400acffffff0c0099000100000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x10) 16:10:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600b002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001ffffff7f0000000100000000000600020000000000"], 0x30}}, 0x0) 16:10:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 503.098862] scsi_io_completion_action: 2 callbacks suppressed [ 503.098905] sd 0:0:1:0: [sg0] tag#4089 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 503.115067] sd 0:0:1:0: [sg0] tag#4089 CDB: Variable length, sa=0x0 [ 503.121894] sd 0:0:1:0: [sg0] tag#4089 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 503.130982] sd 0:0:1:0: [sg0] tag#4089 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 503.139872] sd 0:0:1:0: [sg0] tag#4089 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_notify(r1, &(0x7f0000000000)={0x0, 0x24, 0x1, @tid=0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000006e62128e02dea01069e23b11e60d5f5658456270ac9fee38462a50c9f73753ac5326f348c4cb72e554d5d0efb43a3f5f74dae3072bc91e34d51f0afb1f4a551b60dd262eaf7e074b27b6aff62a03ebb76a40b952b7c8df2c98f673b2a4f5adcaa9c3b6d89519dfecc5700257b3addb94475334efb13c0f7d8d9a141d36936ee010d3abe87e454204dcbe6790fd44b78a198e9bcb3214f3d66155a0fe7066994175f37658319594282aa2e04ee92b3", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) [ 503.148823] sd 0:0:1:0: [sg0] tag#4089 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 503.157765] sd 0:0:1:0: [sg0] tag#4089 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 503.166699] sd 0:0:1:0: [sg0] tag#4089 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 503.175726] sd 0:0:1:0: [sg0] tag#4089 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 503.184651] sd 0:0:1:0: [sg0] tag#4089 CDB[70]: 00 00 20 00 00 00 00 16:10:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='p0\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 503.219890] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 503.219890] 16:10:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000c001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 503.495231] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 503.495231] 16:10:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000001f001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 503.662177] sd 0:0:1:0: [sg0] tag#4090 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 503.671212] sd 0:0:1:0: [sg0] tag#4090 CDB: Variable length, sa=0x0 [ 503.677681] sd 0:0:1:0: [sg0] tag#4090 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 503.686649] sd 0:0:1:0: [sg0] tag#4090 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 503.695590] sd 0:0:1:0: [sg0] tag#4090 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 503.704531] sd 0:0:1:0: [sg0] tag#4090 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 503.713474] sd 0:0:1:0: [sg0] tag#4090 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 503.722425] sd 0:0:1:0: [sg0] tag#4090 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 503.732936] sd 0:0:1:0: [sg0] tag#4090 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 503.742424] sd 0:0:1:0: [sg0] tag#4090 CDB[70]: 00 00 20 00 00 00 00 16:10:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600c002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 503.776312] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 503.776312] 16:10:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 503.929319] sd 0:0:1:0: [sg0] tag#4162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 503.938432] sd 0:0:1:0: [sg0] tag#4162 CDB: Variable length, sa=0x0 [ 503.944988] sd 0:0:1:0: [sg0] tag#4162 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 503.953993] sd 0:0:1:0: [sg0] tag#4162 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 503.962993] sd 0:0:1:0: [sg0] tag#4162 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 503.971984] sd 0:0:1:0: [sg0] tag#4162 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 503.980938] sd 0:0:1:0: [sg0] tag#4162 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 503.989836] sd 0:0:1:0: [sg0] tag#4162 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 503.993759] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 503.993759] [ 503.998771] sd 0:0:1:0: [sg0] tag#4162 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 504.016233] sd 0:0:1:0: [sg0] tag#4162 CDB[70]: 00 00 20 00 00 00 00 16:10:40 executing program 4: ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f00000001c0)={0x401, 0xf900, "d4b57fcb85394539486675e0c57b3a6f0be3185b4cddaf89", {0x5, 0xffffa55a}, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048805}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x44000000) 16:10:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000022001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600d002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 504.227086] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 504.227086] [ 504.236352] sd 0:0:1:0: [sg0] tag#4163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 504.245308] sd 0:0:1:0: [sg0] tag#4163 CDB: Variable length, sa=0x0 [ 504.251861] sd 0:0:1:0: [sg0] tag#4163 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 504.260826] sd 0:0:1:0: [sg0] tag#4163 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 504.269768] sd 0:0:1:0: [sg0] tag#4163 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 504.278755] sd 0:0:1:0: [sg0] tag#4163 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 504.287806] sd 0:0:1:0: [sg0] tag#4163 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 504.296782] sd 0:0:1:0: [sg0] tag#4163 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 504.305733] sd 0:0:1:0: [sg0] tag#4163 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 504.314683] sd 0:0:1:0: [sg0] tag#4163 CDB[70]: 00 00 20 00 00 00 00 16:10:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000023001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006010002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 504.529284] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 504.529284] 16:10:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002c001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 504.667202] sd 0:0:1:0: [sg0] tag#4164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 504.676325] sd 0:0:1:0: [sg0] tag#4164 CDB: Variable length, sa=0x0 [ 504.682955] sd 0:0:1:0: [sg0] tag#4164 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 504.691906] sd 0:0:1:0: [sg0] tag#4164 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 504.700879] sd 0:0:1:0: [sg0] tag#4164 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 504.709771] sd 0:0:1:0: [sg0] tag#4164 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 504.716336] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 504.716336] [ 504.718733] sd 0:0:1:0: [sg0] tag#4164 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 504.736242] sd 0:0:1:0: [sg0] tag#4164 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 504.745311] sd 0:0:1:0: [sg0] tag#4164 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 504.754257] sd 0:0:1:0: [sg0] tag#4164 CDB[70]: 00 00 20 00 00 00 00 [ 504.773969] sd 0:0:1:0: [sg0] tag#4165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 504.783122] sd 0:0:1:0: [sg0] tag#4165 CDB: Variable length, sa=0x0 [ 504.789593] sd 0:0:1:0: [sg0] tag#4165 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 504.798664] sd 0:0:1:0: [sg0] tag#4165 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 504.807608] sd 0:0:1:0: [sg0] tag#4165 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003f001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006024002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 504.816546] sd 0:0:1:0: [sg0] tag#4165 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 504.825931] sd 0:0:1:0: [sg0] tag#4165 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 504.834859] sd 0:0:1:0: [sg0] tag#4165 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 504.843806] sd 0:0:1:0: [sg0] tag#4165 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 504.852758] sd 0:0:1:0: [sg0] tag#4165 CDB[70]: 00 00 20 00 00 00 00 [ 504.977897] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 504.977897] [ 505.007190] sd 0:0:1:0: [sg0] tag#4166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 505.016106] sd 0:0:1:0: [sg0] tag#4166 CDB: Variable length, sa=0x0 [ 505.022641] sd 0:0:1:0: [sg0] tag#4166 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 505.031608] sd 0:0:1:0: [sg0] tag#4166 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 505.040576] sd 0:0:1:0: [sg0] tag#4166 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 505.049506] sd 0:0:1:0: [sg0] tag#4166 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 505.058501] sd 0:0:1:0: [sg0] tag#4166 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 505.067475] sd 0:0:1:0: [sg0] tag#4166 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 505.076432] sd 0:0:1:0: [sg0] tag#4166 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 505.085398] sd 0:0:1:0: [sg0] tag#4166 CDB[70]: 00 00 20 00 00 00 00 16:10:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000040001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000003780)={'ip6tnl0\x00', &(0x7f0000003700)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x46, 0x1, 0x21, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x80, 0x40, 0x2, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003800)={'erspan0\x00', &(0x7f00000037c0)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x8, 0x3f, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003880)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003cc0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003c80)={&(0x7f00000038c0)={0x3c0, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x15}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000080)="a1af628b690df265a0f16728b1b197b26133294927ac657ebcec245c7075ce38b84a1ba912075554cde6ee4846baf3872a9633da303f23f20cbb22867bb8732337280f3a9dafe2a9f5300bddc53fbbe4186b8c311a51f58a1b04d8aad827f9aba91b8664211b2d95a3c514faf7d544f0fa62d6003620bced20e501c5d2cf2c90dacedd87045223632c4bed738668", 0x8e}, {&(0x7f0000002280)="703fb3de829b5db17c9cf6c423afce10a4f44ddd52f75f9b729ed8f42b762562c6a0fed07f76b482e86ef27d630c2a72a4c2740f6fb9ba88182e681441e4a1c34da6ee8ff6be1f48af2657706a577b26375f8c98774eefb54ffa389f9aa8959bc801297fa9a1d0e73a7f9698d548d37c4ad6629a45728e3bf480323dc23331eddffae897fe75f802221f105098b1f3be630b50c6fc2d6e80eb7d8d942989193fe2cd4f97602d", 0xa6}], 0x4, &(0x7f0000002340)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x1, 0xcd, 0x0, [@empty]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x32, 0x1, [], [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x5}]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x11, 0x1, [], [@jumbo={0xc2, 0x4, 0xd3}, @pad1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x73, 0x6, 0x3, 0x7, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @mcast2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x3c, 0x1, [], [@pad1, @pad1, @pad1]}}}, @dontfrag={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0xfb}}, @hoplimit={{0x14, 0x29, 0x34, 0xc0000000}}], 0x160}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x8, @private2, 0x220}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000000200)="d366762ba590aeb3961dbd27979bcda86b5a6224782c2816959decd5de015c70347b26434413b9a6cdf822f9875e542946", 0x31}, {&(0x7f00000024c0)="537f683bb5c8087db455aaa7e030eac457d4c077c34c294165fe9d20234d59aa6fc26738677ee129b5d7ae063aabfd5e2fab45bce824bc2ece8039391c0981544a0ac3b409d622bf8c3beba94021629980027558bd110ff503c6f1f144843a7258bef83be318a212a6a48c3eaff78b4a19a6393849317262e7c70a56b41f2d1b4bfc624e1a2f42fa430b8b7a262f805d921891804e2bbbbc8584d446f849691e", 0xa0}], 0x2, &(0x7f00000025c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @ra={0x5, 0x2, 0x6}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x0, 0x7c, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @local, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, [], 0x1}, @empty]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x29, 0x12, 0x0, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @mcast2, @ipv4={[], [], @broadcast}, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, @remote, @private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x2b, 0x15, [], [@jumbo, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x20, 0x93, "689a73ceb513311413168aa338429e7da984f46951988e903338b6c7c9366d18683d996640bd34d0016a001d874db4a3f2c68bbb73a61f5a8c1a1d3c104df669dde33eee52c759fbc531a61f3778deee3b09db5c58759bb27d6c30515c950c8235ad40860a6fb490fbefcee07529c619bd78afcd21c15fb010593e21002dad708fb1ca0d7437b3d73e3c3cfb9271660e9096d8"}, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x40}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0xb3, 0x18, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x293}, @pad1, @generic={0x20, 0x73, "3564da63dac3edbd3312f07c732d1231805eabc4d6128bd919fff8e780b29455038e5f52bb90d94b93e75ad12f15c66dea6558dec636661654e05dc0f8f7792fb23439d7fce3b260e5e2ec734a7b4d653e3a7261c42865195d2425be226f8cb5093a87099edc97bf67a6d061de33325a46355a"}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2c, 0x9, [], [@enc_lim={0x4, 0x1, 0x30}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x10000}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x5, [0x1]}}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @loopback}, @pad1, @enc_lim={0x4, 0x1, 0x3f}]}}}], 0x3c0}}, {{&(0x7f0000002980)={0xa, 0x4e24, 0xfffffffd, @private2={0xfc, 0x2, [], 0x1}, 0x40000000}, 0x1c, &(0x7f0000002b40)=[{&(0x7f00000029c0)="11b96b9e76a6c73aefdb48982e8f5fea17f3374b48efa42ecebbd326bd14cfe1dcb4c8ae1fe6b5d2a1ca27084504a2c3f5cdbd521c7a638b1a0e31bbc4cf0899f3a0d96cddcb224fc2e4d7d7f1dad3fea2ab7a0b164055d15f359ebbacd9", 0x5e}, {&(0x7f0000002a40)="aebbc46943a67b9f3bdc87ea42a88b89be444c83deca181ef1ce18bd778f6a0743656fcd6873f673f0d2f412cc4ee03d3693520557632f5ddf36775bae6ef8277a21dbe03e8b8dfc5078f582e65d4abf16f055d4372f2e3d57e79b6e2c3cc234678907c706852f76918559c790bb98c79da940fd52be222c836952a46cfe439f59fa2c6422425a2a04a677eda8797474f227eb47c0d0f76f9a8ba33bca519b6c9d584abe6cf82c282d5cdb6de5cd28cea06a36abebde7b122d188493c001c6f9a88910b529c15302eaab1f7e54cc9029bcdbb3bb322522701d2e3d39b13602eb4f365345f448bff68c272767a8", 0xed}], 0x2, &(0x7f0000002b80)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x5c, 0x10, 0x2, 0x1f, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @dev={0xfe, 0x80, [], 0x1b}, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, [], [@enc_lim={0x4, 0x1, 0x5}]}}}], 0xd0}}, {{&(0x7f0000002c80)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x98d}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002cc0)="2ab9d9f33a8beb56470ec3641c3b1613f7a7bce347926ea50c08d3829b0e5a69a63ab789bcc7e098663a8992a5d34b90fb9b8a421a3bdf7eff16d0e086cfe71f638e5f9a69bfc39eca4f28262f60", 0x4e}, {&(0x7f0000002d40)="2d27740aeb2f91495bc75ee9a9eb29cf88fd9764b8dc490f448deed1af6b2c741c9bb3beb24e0af8701fb84aaf53dd74a0488e4885f703e646890ad47d9114ff11", 0x41}, {&(0x7f0000002dc0)="7883650f0416e28640808b126c65c292d80cc7e306333626e9a469ed8a73db094861a589df9f5ffe07ee668439183d17bc578dee6979ed13cfe092f5b01283d329df8cee", 0x44}], 0x3, &(0x7f0000002e80)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r10}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1, 0x0, [], [@pad1, @ra={0x5, 0x2, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x4, 0x5, [], [@enc_lim={0x4, 0x1, 0x22}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x400}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x17, 0x6, [], [@ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @generic={0x28, 0x1e, "7e7c3f8fae9bbe734b2381ea0d8bfb9b13cf648111dfcb807304b105ae3a"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @tclass={{0x14}}], 0x140}}, {{&(0x7f0000002fc0)={0xa, 0x4e24, 0x0, @private0, 0x9}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000003000)="e2996f476245d5d123445161ddec874f8a66ceb85c811840bdde", 0x1a}, {&(0x7f0000003040)="898d88ed8a5ceb3516be489b3c11e1f566164dfcabd6d8b5ea357fe1dd08a05ff4ea1ec363159f2f1cc947f450b4e1cebeffa258ef6ad1c6af62e08c197eb5df7f8ab5236d15bacae9676a007372cfcbb5e48803f7e9762710ee392f08d88dbd02e4035d54750cad5d48040f3781cbb03414c3f70c1e8e2c712e9e7d332f09a9ac5e419c891faf3907a73229bd4805ef81e11f85b73bfbf528b79d3cab71d2372a3bdc9631167168cda8e46ab870e729e1fc1f5c2cfc0e882a7e6ca99ca015ea25dc9bc6a086ed5ff11dbfbb0a6f512e2da323e6ee2b42f8e3", 0xd9}, {&(0x7f0000003140)="a410016c9e747943879497bcb2a4", 0xe}, {&(0x7f0000003180)="8e9cabd3f812aa49e379e61d78f25ab24194cd15c40f8f46dc902f2fa5941dfc0c424e3cd2eb3ed2767813266c6d040d4922d277b53f5dd47815a28c0d2e9a665676df33ade388b59ff0648fdade160204af40348c5954f76f155084f51bd71f32bc94526e2ec915cb8aee2e72effab5474107d37b64c8e6c08cfc6d0f54c80fb242f5102afb5247e9d045f5c84658a16f6263232b8c8398c2fc", 0x9a}], 0x4, &(0x7f0000003280)=[@flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x89, 0x3, [], [@hao={0xc9, 0x10, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x66}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts={{0x150, 0x29, 0x36, {0x16, 0x26, [], [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @mcast1}, @generic={0x7, 0xcd, "209ac5046e6b3ea55ebeaba5f59d98221bb03beb0b9653ac876a637f11e582ef424eae60dcb36478125e1cd83424f01456089fb1e4156cd0f868b21639f233bc275801e8ce54e32035457f8db682f903397dc207d2c6c9beca6761d22dcb7cdbb8760d06e0f03f63783ea039f8f9616de530dcf0baeb38d671716cfbd9b6b82c0469323d6b4e8f7df8fc01353960fe226864e29cc78417c022afcb9769c4b3f9b4b20b4522da5cb9250101a1ad760d2b0c963da71e20770f9fbf767732ecf031d1af1136df2fee5e67e718ed0e"}, @jumbo={0xc2, 0x4, 0xffffffff}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x0, 0x5a, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x42}, @local, @ipv4={[], [], @multicast1}, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}], 0x230}}], 0x5, 0x40004) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 505.259740] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 505.259740] 16:10:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006025002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000060001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000000)={0x0, 0x1, [0x4, 0x1, 0x0, 0x1f, 0x8001, 0x1f, 0x75, 0x5]}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) [ 505.455011] sd 0:0:1:0: [sg0] tag#4167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 505.464027] sd 0:0:1:0: [sg0] tag#4167 CDB: Variable length, sa=0x0 [ 505.470590] sd 0:0:1:0: [sg0] tag#4167 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 505.479620] sd 0:0:1:0: [sg0] tag#4167 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 505.488586] sd 0:0:1:0: [sg0] tag#4167 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 505.497542] sd 0:0:1:0: [sg0] tag#4167 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 505.506514] sd 0:0:1:0: [sg0] tag#4167 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 505.512675] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 505.512675] [ 505.515458] sd 0:0:1:0: [sg0] tag#4167 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 505.533034] sd 0:0:1:0: [sg0] tag#4167 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 505.541980] sd 0:0:1:0: [sg0] tag#4167 CDB[70]: 00 00 20 00 00 00 00 16:10:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010000000000060004000000000006000200000000006ea3b7a318e6eb07e35e09ffd3cb581df1201da5b9506a481265aa8b2e3da7e2a3e44f653bdedab31d97c0fb9d7dcd7173ed4998ec942bcf5c9fdb"], 0x30}}, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffff9) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @loopback}}, [0x7fffffff, 0x3, 0x100, 0x7, 0x400000, 0x6, 0x9, 0x4, 0xfffffffffffffbff, 0x2, 0x9, 0x1, 0x7fff, 0x3ff, 0xf618]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000340)={r8, 0x3666}, 0x8) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000000c0)=0x1000c2, 0x4) 16:10:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000fff0001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 505.817057] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 505.817057] 16:10:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006048002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000fff001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) [ 506.044606] sd 0:0:1:0: [sg0] tag#4168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 506.053503] sd 0:0:1:0: [sg0] tag#4168 CDB: Variable length, sa=0x0 [ 506.060020] sd 0:0:1:0: [sg0] tag#4168 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 506.068904] sd 0:0:1:0: [sg0] tag#4168 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 506.077851] sd 0:0:1:0: [sg0] tag#4168 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="f48a975606b6f67b73e8d7b82f540bc5f3134e168ef8f4bdb43169ecd5c67a9fabbf81b1bf9e130d6ac194571161d8e2251b4d325c7b41fb25418afd46c2", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002800038014000600fe8000000000000000000000000000aa06000400f9ff00000600040005000000"], 0x3c}}, 0x0) [ 506.087387] sd 0:0:1:0: [sg0] tag#4168 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 506.096328] sd 0:0:1:0: [sg0] tag#4168 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 506.105252] sd 0:0:1:0: [sg0] tag#4168 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 506.114180] sd 0:0:1:0: [sg0] tag#4168 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 506.123105] sd 0:0:1:0: [sg0] tag#4168 CDB[70]: 00 00 20 00 00 00 00 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) [ 506.145604] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 506.145604] 16:10:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000f0ff001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 16:10:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000080), 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={{0x0, 0x1, 0x0, 0x1}, 0x6}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x48004) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendfile(r3, r4, &(0x7f0000000200)=0x67, 0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000008a529cd0be0800", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000604c002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) [ 506.435873] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 506.435873] [ 506.444897] sd 0:0:1:0: [sg0] tag#4168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 506.453789] sd 0:0:1:0: [sg0] tag#4168 CDB: Variable length, sa=0x0 [ 506.460335] sd 0:0:1:0: [sg0] tag#4168 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 506.469214] sd 0:0:1:0: [sg0] tag#4168 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 16:10:42 executing program 5: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x120, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xea1faaa4966060cc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="304def33", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) [ 506.478179] sd 0:0:1:0: [sg0] tag#4168 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 506.487157] sd 0:0:1:0: [sg0] tag#4168 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 506.496091] sd 0:0:1:0: [sg0] tag#4168 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 506.505214] sd 0:0:1:0: [sg0] tag#4168 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 506.514148] sd 0:0:1:0: [sg0] tag#4168 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 506.523118] sd 0:0:1:0: [sg0] tag#4168 CDB[70]: 00 00 20 00 00 00 00 16:10:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001400000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:42 executing program 5: io_setup(0xffff0ca1, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000049e3005800010000000000000006000200000000004724ed9c0000000000000000000000df4a755c567c78fcf300f2bf8703d09023f68449f4be143e40acda892b0c61be02041b218967af898e"], 0x30}}, 0x0) 16:10:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000022300000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 16:10:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006060002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000046b8db3ede697fee1c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006068002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000606c002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101402, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x8008041) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006070002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c400180060001000000000006000400000000020000000000"], 0x30}}, 0x0) 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006074002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000003b100000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x410002, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x14c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x42, @remote, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @private1, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7630cc39}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5bec}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba7b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) [ 507.291534] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 507.323502] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000607a002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fb00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088012000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000fffffffb00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088022000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000fffffffc00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000032000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004000000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088032000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 508.174287] scsi_io_completion_action: 9 callbacks suppressed [ 508.174336] sd 0:0:1:0: [sg0] tag#4169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 508.189286] sd 0:0:1:0: [sg0] tag#4169 CDB: Variable length, sa=0x0 [ 508.195818] sd 0:0:1:0: [sg0] tag#4169 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 508.204798] sd 0:0:1:0: [sg0] tag#4169 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 508.213754] sd 0:0:1:0: [sg0] tag#4169 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000008000000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 508.222740] sd 0:0:1:0: [sg0] tag#4169 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 508.231703] sd 0:0:1:0: [sg0] tag#4169 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 508.240673] sd 0:0:1:0: [sg0] tag#4169 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 508.249653] sd 0:0:1:0: [sg0] tag#4169 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 508.258594] sd 0:0:1:0: [sg0] tag#4169 CDB[70]: 00 00 20 00 00 00 00 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000052000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000200000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 508.592431] sd 0:0:1:0: [sg0] tag#4170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 508.601455] sd 0:0:1:0: [sg0] tag#4170 CDB: Variable length, sa=0x0 [ 508.607939] sd 0:0:1:0: [sg0] tag#4170 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 508.616895] sd 0:0:1:0: [sg0] tag#4170 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 508.625861] sd 0:0:1:0: [sg0] tag#4170 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 508.634861] sd 0:0:1:0: [sg0] tag#4170 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 508.644041] sd 0:0:1:0: [sg0] tag#4170 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 508.652987] sd 0:0:1:0: [sg0] tag#4170 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 508.661930] sd 0:0:1:0: [sg0] tag#4170 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 508.670854] sd 0:0:1:0: [sg0] tag#4170 CDB[70]: 00 00 20 00 00 00 00 16:10:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088052000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003c770a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 508.886642] sd 0:0:1:0: [sg0] tag#4171 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 508.895548] sd 0:0:1:0: [sg0] tag#4171 CDB: Variable length, sa=0x0 [ 508.902121] sd 0:0:1:0: [sg0] tag#4171 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 508.911065] sd 0:0:1:0: [sg0] tag#4171 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 508.920002] sd 0:0:1:0: [sg0] tag#4171 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000062000000000000040000000000008000000", 0x200000bf}], 0x2) [ 508.928892] sd 0:0:1:0: [sg0] tag#4171 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 508.937865] sd 0:0:1:0: [sg0] tag#4171 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 508.946810] sd 0:0:1:0: [sg0] tag#4171 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 508.955854] sd 0:0:1:0: [sg0] tag#4171 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 508.964787] sd 0:0:1:0: [sg0] tag#4171 CDB[70]: 00 00 20 00 00 00 00 16:10:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000044770a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) [ 509.131148] sd 0:0:1:0: [sg0] tag#4092 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 509.140064] sd 0:0:1:0: [sg0] tag#4092 CDB: Variable length, sa=0x0 [ 509.146528] sd 0:0:1:0: [sg0] tag#4092 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 509.156960] sd 0:0:1:0: [sg0] tag#4092 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 509.166192] sd 0:0:1:0: [sg0] tag#4092 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000cc7d0a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 509.175159] sd 0:0:1:0: [sg0] tag#4092 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 509.184084] sd 0:0:1:0: [sg0] tag#4092 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 509.193025] sd 0:0:1:0: [sg0] tag#4092 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 509.201962] sd 0:0:1:0: [sg0] tag#4092 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 509.210881] sd 0:0:1:0: [sg0] tag#4092 CDB[70]: 00 00 20 00 00 00 00 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) 16:10:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000d07d0a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088062000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 509.563862] sd 0:0:1:0: [sg0] tag#4093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 509.572910] sd 0:0:1:0: [sg0] tag#4093 CDB: Variable length, sa=0x0 [ 509.579381] sd 0:0:1:0: [sg0] tag#4093 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 509.588532] sd 0:0:1:0: [sg0] tag#4093 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 509.597496] sd 0:0:1:0: [sg0] tag#4093 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000d47d0a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:45 executing program 5: mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c054}, 0x51) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x4041, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, 0x0, 0x20040000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x409000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d400000086f6b1b6cf01b0126f4de401790f307c96b281669fee5f424b4f27b46cf0444157b9a7a51e595b4bcbcba725a83d57e659b3a229420000000000008000a29621c1af96bf1072dbd1c4199680e4e23d85897e0139f89f060000000000000000a38b706927c063622d2509a16b74ae0ab193502b873174e66d3edf625d61bd586a78c186214916588bc8559d4a497a71a7c93b407b55279794a1637c47e5e44ef49042c9ed3b1cb9b9378bd64ddf4e622b42a70d810702e2080c1c7a6035c033b5b0a917dd6c51154f1a4e0343dc82c87b99e3a04b8a8bfe1a006c55a823d0b50609a60eacbd9e190ee6ad285e61d1474c72584d6370ffa8b11bd217c691140e577fbf3652c9c81768e78a8ce3d2fd620e", @ANYRES16=r7, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x410}, 0x4040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0xcc, r7, 0xb02, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0xf6b}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1f}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c00001855703afdd40755a71a165eff646d7eb6cfc057920ee3d4fa51d493dc2a047f4c584ae3aa8b348ff532d856340590e1530f48f307b8e2aa6789c80fcdc7e88f9860bfe6f6b2471c9cedf3037776701b1022613a343fe07dd4d50b36fac1e44224e6226dae056821f5d134124c33a1ed2db8", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000500030000004c000180080009004e00000008000b0073697000080009005700000007000600666f00000800080007000000060004004e2200000600040007ff00000600010002000000075c5ec866d609e6e9e9066a29120f00060072720000240002800800050012ffffff060002004e2000000800b4df3a6b3c3a0f1ac18e28730028aed4be5ec34bd09e25f167d08defab63202e16ca533b6e49"], 0x8c}}, 0x0) 16:10:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000072000000000000040000000000008000000", 0x200000bf}], 0x2) [ 509.606604] sd 0:0:1:0: [sg0] tag#4093 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 509.615563] sd 0:0:1:0: [sg0] tag#4093 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 509.624509] sd 0:0:1:0: [sg0] tag#4093 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 509.633452] sd 0:0:1:0: [sg0] tag#4093 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 509.642382] sd 0:0:1:0: [sg0] tag#4093 CDB[70]: 00 00 20 00 00 00 00 16:10:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 16:10:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000d87d0a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010062b3e06754a3d09c010000001c0001800600010000000000060004000000000006000200000000007439868cec8468c756a6561887460d64cb061d2177cb444572de7434e39d21ee692debfd3fef0ecb7dbd6cfdf2b52a6252851314f38759e66cd9f05416e545a405c2ec52b790f84e776e7fdeba576bc261fdd2"], 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000000)=[0x2, 0x10000], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000200)={0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000240)={0xdbf, [[0xa53, 0x638, 0x6, 0x762, 0x0, 0x0, 0x918c, 0x4], [0x6, 0xfffffffc, 0x40, 0x9, 0x6, 0x0, 0x8, 0x4], [0x5a76, 0x3f, 0x7, 0x1, 0x7, 0xff3, 0x8]], [], [{0x0, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x7f, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x5, 0x1}, {0x1, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x8001, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0xed6, 0x1, 0x0, 0x0, 0x1}, {0x101, 0x6, 0x1, 0x1}, {0x1, 0x7fff}, {0xc90, 0xffff8001, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x7fff, 0x1, 0x1, 0x0, 0x1}, {0xffffff1f, 0x39fe, 0x1}, {0x3f, 0x0, 0x1, 0x0, 0x1}], [], 0x1000000}) [ 509.845683] sd 0:0:1:0: [sg0] tag#4172 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 509.854608] sd 0:0:1:0: [sg0] tag#4172 CDB: Variable length, sa=0x0 [ 509.861164] sd 0:0:1:0: [sg0] tag#4172 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 509.870114] sd 0:0:1:0: [sg0] tag#4172 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 509.879023] sd 0:0:1:0: [sg0] tag#4172 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x4c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}]}}}]}, 0x7c}}, 0x0) [ 509.888117] sd 0:0:1:0: [sg0] tag#4172 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 509.897159] sd 0:0:1:0: [sg0] tag#4172 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 509.906102] sd 0:0:1:0: [sg0] tag#4172 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 509.915044] sd 0:0:1:0: [sg0] tag#4172 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 509.923987] sd 0:0:1:0: [sg0] tag#4172 CDB[70]: 00 00 20 00 00 00 00 16:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000e07d0a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x40, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}]}}}]}, 0x70}}, 0x0) 16:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c00018006000100000000000600040000000000060002001f000000"], 0x30}}, 0x0) 16:10:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088072000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xfb, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000002001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x64}}, 0x0) [ 510.374617] sd 0:0:1:0: [sg0] tag#4173 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 510.383598] sd 0:0:1:0: [sg0] tag#4173 CDB: Variable length, sa=0x0 [ 510.390162] sd 0:0:1:0: [sg0] tag#4173 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 510.399083] sd 0:0:1:0: [sg0] tag#4173 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 510.408110] sd 0:0:1:0: [sg0] tag#4173 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x1, 0x3, 0x29ad, 0x4, 0x18}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) [ 510.417163] sd 0:0:1:0: [sg0] tag#4173 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 510.426148] sd 0:0:1:0: [sg0] tag#4173 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 510.435193] sd 0:0:1:0: [sg0] tag#4173 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 510.444228] sd 0:0:1:0: [sg0] tag#4173 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 510.453178] sd 0:0:1:0: [sg0] tag#4173 CDB[70]: 00 00 20 00 00 00 00 16:10:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x64}}, 0x0) [ 510.514161] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 510.514161] 16:10:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000003001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:46 executing program 5: ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x6, 0x8, [], 0x0, &(0x7f0000000000)=[0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0081800f0001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x64}}, 0x0) 16:10:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088082000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 510.758115] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 510.758115] 16:10:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000013ed3c8ff5e8908174c6c662c42a4a92abc5d55ff99c45270f3769be93b9783660cafac9282fadafce3a433240330e35591cc791bc0300d56183466edba26f4495a2d1d942e09d79574b75ababa5ba76820f26a79d9885ec110a16b8f7eb39ab812adde5a6f506ee021762324a8ea36cdb99482f557bcc00561290384fa6e394dcb10ba07999b7f2d59ee29d25418d68b81f", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000fda6d0b6bc037980da44453c001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) [ 510.860741] sd 0:0:1:0: [sg0] tag#4174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 510.869895] sd 0:0:1:0: [sg0] tag#4174 CDB: Variable length, sa=0x0 [ 510.876459] sd 0:0:1:0: [sg0] tag#4174 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 510.885419] sd 0:0:1:0: [sg0] tag#4174 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 510.894364] sd 0:0:1:0: [sg0] tag#4174 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x40, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x70}}, 0x0) 16:10:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000092000000000000040000000000008000000", 0x200000bf}], 0x2) [ 510.903317] sd 0:0:1:0: [sg0] tag#4174 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 510.912482] sd 0:0:1:0: [sg0] tag#4174 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 510.921459] sd 0:0:1:0: [sg0] tag#4174 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 510.930414] sd 0:0:1:0: [sg0] tag#4174 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 510.939367] sd 0:0:1:0: [sg0] tag#4174 CDB[70]: 00 00 20 00 00 00 00 [ 510.978621] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 510.978621] 16:10:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000005001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 511.134068] sd 0:0:1:0: [sg0] tag#4094 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 511.143140] sd 0:0:1:0: [sg0] tag#4094 CDB: Variable length, sa=0x0 [ 511.149780] sd 0:0:1:0: [sg0] tag#4094 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 511.158674] sd 0:0:1:0: [sg0] tag#4094 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 511.167613] sd 0:0:1:0: [sg0] tag#4094 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x68}}, 0x0) [ 511.176549] sd 0:0:1:0: [sg0] tag#4094 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 511.185488] sd 0:0:1:0: [sg0] tag#4094 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 511.194422] sd 0:0:1:0: [sg0] tag#4094 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 511.204964] sd 0:0:1:0: [sg0] tag#4094 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 511.214417] sd 0:0:1:0: [sg0] tag#4094 CDB[70]: 00 00 20 00 00 00 00 [ 511.299020] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 511.299020] 16:10:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000a2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000006001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 511.512964] sd 0:0:1:0: [sg0] tag#4095 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 511.522294] sd 0:0:1:0: [sg0] tag#4095 CDB: Variable length, sa=0x0 [ 511.528900] sd 0:0:1:0: [sg0] tag#4095 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 511.538660] sd 0:0:1:0: [sg0] tag#4095 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 511.547657] sd 0:0:1:0: [sg0] tag#4095 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 511.556735] sd 0:0:1:0: [sg0] tag#4095 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 511.565705] sd 0:0:1:0: [sg0] tag#4095 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 511.574664] sd 0:0:1:0: [sg0] tag#4095 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 511.583655] sd 0:0:1:0: [sg0] tag#4095 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 511.592711] sd 0:0:1:0: [sg0] tag#4095 CDB[70]: 00 00 20 00 00 00 00 [ 511.625525] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 511.625525] 16:10:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060880a2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000007001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003c770a00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000b2000000000000040000000000008000000", 0x200000bf}], 0x2) [ 511.887150] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 511.887150] 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060880b2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:48 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x410001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xd, 0x4, 0x4, 0x123, 0x0, r1, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8]}, 0x40) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/224, &(0x7f00000001c0)=0xe0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) dup(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:10:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000009001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060880c2000000000000040000000000008000000", 0x200000bf}], 0x2) [ 512.206623] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 512.206623] 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000d2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060880e2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000c001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 512.534561] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 512.534561] 16:10:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060880f2000000000000040000000000008000000", 0x200000bf}], 0x2) [ 512.696906] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 512.696906] 16:10:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000010001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088122000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) 16:10:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 513.015515] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 513.015515] 16:10:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088152000000000000040000000000008000000", 0x200000bf}], 0x2) [ 513.168057] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 513.168057] 16:10:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0xc00e000000000000) [ 513.237125] scsi_io_completion_action: 9 callbacks suppressed [ 513.237172] sd 0:0:1:0: [sg0] tag#4175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 513.252218] sd 0:0:1:0: [sg0] tag#4175 CDB: Variable length, sa=0x0 [ 513.258685] sd 0:0:1:0: [sg0] tag#4175 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 513.267622] sd 0:0:1:0: [sg0] tag#4175 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 513.276560] sd 0:0:1:0: [sg0] tag#4175 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 513.285522] sd 0:0:1:0: [sg0] tag#4175 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 513.294463] sd 0:0:1:0: [sg0] tag#4175 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 513.303396] sd 0:0:1:0: [sg0] tag#4175 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 513.312375] sd 0:0:1:0: [sg0] tag#4175 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 513.321305] sd 0:0:1:0: [sg0] tag#4175 CDB[70]: 00 00 20 00 00 00 00 16:10:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 513.353501] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 513.353501] 16:10:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000022001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:10:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088162000000000000040000000000008000000", 0x200000bf}], 0x2) [ 513.556434] sd 0:0:1:0: [sg0] tag#4096 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 513.565649] sd 0:0:1:0: [sg0] tag#4096 CDB: Variable length, sa=0x0 [ 513.572184] sd 0:0:1:0: [sg0] tag#4096 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 513.581121] sd 0:0:1:0: [sg0] tag#4096 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 513.590053] sd 0:0:1:0: [sg0] tag#4096 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0xffffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 513.599016] sd 0:0:1:0: [sg0] tag#4096 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 513.608018] sd 0:0:1:0: [sg0] tag#4096 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 513.617008] sd 0:0:1:0: [sg0] tag#4096 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 513.625959] sd 0:0:1:0: [sg0] tag#4096 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 513.634888] sd 0:0:1:0: [sg0] tag#4096 CDB[70]: 00 00 20 00 00 00 00 [ 513.660363] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 513.660363] 16:10:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040410000000006000002000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088172000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000023001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 513.802396] sd 0:0:1:0: [sg0] tag#4176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 513.811348] sd 0:0:1:0: [sg0] tag#4176 CDB: Variable length, sa=0x0 [ 513.817827] sd 0:0:1:0: [sg0] tag#4176 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 513.826851] sd 0:0:1:0: [sg0] tag#4176 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 513.835833] sd 0:0:1:0: [sg0] tag#4176 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040410000000006000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 513.844913] sd 0:0:1:0: [sg0] tag#4176 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 513.853905] sd 0:0:1:0: [sg0] tag#4176 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 513.862936] sd 0:0:1:0: [sg0] tag#4176 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 513.871924] sd 0:0:1:0: [sg0] tag#4176 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 513.880907] sd 0:0:1:0: [sg0] tag#4176 CDB[70]: 00 00 20 00 00 00 00 16:10:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088182000000000000040000000000008000000", 0x200000bf}], 0x2) [ 513.920331] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 513.920331] 16:10:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040410000000006000002000000000000040000000000008000000", 0x200000bf}], 0x2) [ 514.063800] sd 0:0:1:0: [sg0] tag#4097 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 514.074066] sd 0:0:1:0: [sg0] tag#4097 CDB: Variable length, sa=0x0 [ 514.081044] sd 0:0:1:0: [sg0] tag#4097 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 514.090000] sd 0:0:1:0: [sg0] tag#4097 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 514.098981] sd 0:0:1:0: [sg0] tag#4097 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002c001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0xbd060000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 514.107873] sd 0:0:1:0: [sg0] tag#4097 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 514.116829] sd 0:0:1:0: [sg0] tag#4097 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 514.125771] sd 0:0:1:0: [sg0] tag#4097 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 514.134728] sd 0:0:1:0: [sg0] tag#4097 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 514.143774] sd 0:0:1:0: [sg0] tag#4097 CDB[70]: 00 00 20 00 00 00 00 16:10:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x10b, 0x34000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 16:10:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006088192000000000000040000000000008000000", 0x200000bf}], 0x2) [ 514.227742] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 514.227742] 16:10:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000060001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 514.365480] sd 0:0:1:0: [sg0] tag#4098 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 514.375584] sd 0:0:1:0: [sg0] tag#4098 CDB: Variable length, sa=0x0 [ 514.382410] sd 0:0:1:0: [sg0] tag#4098 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 514.391360] sd 0:0:1:0: [sg0] tag#4098 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 514.400290] sd 0:0:1:0: [sg0] tag#4098 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:50 executing program 1 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 514.409231] sd 0:0:1:0: [sg0] tag#4098 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 514.418120] sd 0:0:1:0: [sg0] tag#4098 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 514.427055] sd 0:0:1:0: [sg0] tag#4098 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 514.433102] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 514.433102] [ 514.436002] sd 0:0:1:0: [sg0] tag#4098 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 514.453496] sd 0:0:1:0: [sg0] tag#4098 CDB[70]: 00 00 20 00 00 00 00 16:10:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060881a2000000000000040000000000008000000", 0x200000bf}], 0x2) [ 514.601796] sd 0:0:1:0: [sg0] tag#4099 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 514.610884] sd 0:0:1:0: [sg0] tag#4099 CDB: Variable length, sa=0x0 [ 514.617358] sd 0:0:1:0: [sg0] tag#4099 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 514.626331] sd 0:0:1:0: [sg0] tag#4099 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 514.635287] sd 0:0:1:0: [sg0] tag#4099 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000f0001000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 514.644232] sd 0:0:1:0: [sg0] tag#4099 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 514.653192] sd 0:0:1:0: [sg0] tag#4099 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 514.662141] sd 0:0:1:0: [sg0] tag#4099 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 514.671093] sd 0:0:1:0: [sg0] tag#4099 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 514.680041] sd 0:0:1:0: [sg0] tag#4099 CDB[70]: 00 00 20 00 00 00 00 16:10:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060881b2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 514.781861] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 514.781861] [ 514.847734] sd 0:0:1:0: [sg0] tag#4100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 514.856647] sd 0:0:1:0: [sg0] tag#4100 CDB: Variable length, sa=0x0 [ 514.863203] sd 0:0:1:0: [sg0] tag#4100 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 514.872190] sd 0:0:1:0: [sg0] tag#4100 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 514.881248] sd 0:0:1:0: [sg0] tag#4100 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 514.891515] sd 0:0:1:0: [sg0] tag#4100 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 514.900759] sd 0:0:1:0: [sg0] tag#4100 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 514.909854] sd 0:0:1:0: [sg0] tag#4100 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 514.918746] sd 0:0:1:0: [sg0] tag#4100 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 514.927689] sd 0:0:1:0: [sg0] tag#4100 CDB[70]: 00 00 20 00 00 00 00 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060881c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 515.153823] sd 0:0:1:0: [sg0] tag#4177 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 515.162740] sd 0:0:1:0: [sg0] tag#4177 CDB: Variable length, sa=0x0 [ 515.169305] sd 0:0:1:0: [sg0] tag#4177 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 515.178207] sd 0:0:1:0: [sg0] tag#4177 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 515.187156] sd 0:0:1:0: [sg0] tag#4177 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 515.196106] sd 0:0:1:0: [sg0] tag#4177 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 515.205074] sd 0:0:1:0: [sg0] tag#4177 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 515.214054] sd 0:0:1:0: [sg0] tag#4177 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 515.222998] sd 0:0:1:0: [sg0] tag#4177 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 515.231950] sd 0:0:1:0: [sg0] tag#4177 CDB[70]: 00 00 20 00 00 00 00 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060001f2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x5, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 515.475893] sd 0:0:1:0: [sg0] tag#4178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 515.484920] sd 0:0:1:0: [sg0] tag#4178 CDB: Variable length, sa=0x0 [ 515.491461] sd 0:0:1:0: [sg0] tag#4178 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 515.500394] sd 0:0:1:0: [sg0] tag#4178 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 515.509321] sd 0:0:1:0: [sg0] tag#4178 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x204000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000280)={'veth1_vlan\x00', {0x2, 0x0, @local}}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x10402, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x140, r8, 0x800, 0x70bd2d, 0x2, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x930}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff720}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb70a}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004044}, 0x40080) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x60, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0x10027496, 0x3f}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffff00}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xc000, 0x200, 0x7fff, 0x20}}]}}}]}, 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x29, 0x6, 0x20, 0x7, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x7800, 0x20, 0x800, 0x101}}) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x40004004) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x6, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 515.518216] sd 0:0:1:0: [sg0] tag#4178 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 515.527153] sd 0:0:1:0: [sg0] tag#4178 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 515.536079] sd 0:0:1:0: [sg0] tag#4178 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 515.545114] sd 0:0:1:0: [sg0] tag#4178 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 515.554037] sd 0:0:1:0: [sg0] tag#4178 CDB[70]: 00 00 20 00 00 00 00 16:10:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000140)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000075e2346e8c85e0e942717d094b2b765a3852b5fd7152511112ea9a944d7c86648c63b92b25b1a10cbfdabca7f5869cb4a935bdf62a2819879577122601eb75e474388cc1d00e0cc0ac0d6a3cc3ba31b40f61701a238b1030097038edfaa876028eb1a3", @ANYRES16=r1, @ANYBLOB="0100000000000000000001004b53f6a43f0d0a89810000000000"], 0x20}}, 0x0) 16:10:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000202000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 515.961683] sd 0:0:1:0: [sg0] tag#4101 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 515.970558] sd 0:0:1:0: [sg0] tag#4101 CDB: Variable length, sa=0x0 [ 515.977136] sd 0:0:1:0: [sg0] tag#4101 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 515.986106] sd 0:0:1:0: [sg0] tag#4101 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 515.995062] sd 0:0:1:0: [sg0] tag#4101 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 516.004129] sd 0:0:1:0: [sg0] tag#4101 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 516.014417] sd 0:0:1:0: [sg0] tag#4101 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 516.023600] sd 0:0:1:0: [sg0] tag#4101 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 516.032533] sd 0:0:1:0: [sg0] tag#4101 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 516.041464] sd 0:0:1:0: [sg0] tag#4101 CDB[70]: 00 00 20 00 00 00 00 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000242000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xa, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00020300000000000000010000000c0001800600020033000000"], 0x20}}, 0x0) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000252000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060003f2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) getpgid(0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}}, 0x0) 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xb, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000001f1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000482000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060004c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000201000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000602000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000221000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000682000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060006c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x24, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000702000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x60, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000742000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003f1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060007a2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000608f7e2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000401000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x300, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000608f7f2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006001882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x600, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006002882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000fff01000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006003882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x900, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000fff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006005882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 518.241028] scsi_io_completion_action: 16 callbacks suppressed [ 518.241071] sd 0:0:1:0: [sg0] tag#4178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 518.256029] sd 0:0:1:0: [sg0] tag#4178 CDB: Variable length, sa=0x0 [ 518.262544] sd 0:0:1:0: [sg0] tag#4178 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 518.271566] sd 0:0:1:0: [sg0] tag#4178 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 518.280518] sd 0:0:1:0: [sg0] tag#4178 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xa00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000f0ff1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006006882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 518.289466] sd 0:0:1:0: [sg0] tag#4178 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 518.298352] sd 0:0:1:0: [sg0] tag#4178 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 518.307299] sd 0:0:1:0: [sg0] tag#4178 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 518.316270] sd 0:0:1:0: [sg0] tag#4178 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 518.325193] sd 0:0:1:0: [sg0] tag#4178 CDB[70]: 00 00 20 00 00 00 00 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xb00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 518.483932] sd 0:0:1:0: [sg0] tag#4102 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 518.492754] sd 0:0:1:0: [sg0] tag#4102 CDB: Variable length, sa=0x0 [ 518.499308] sd 0:0:1:0: [sg0] tag#4102 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 518.508219] sd 0:0:1:0: [sg0] tag#4102 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 518.517172] sd 0:0:1:0: [sg0] tag#4102 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000004000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 518.526116] sd 0:0:1:0: [sg0] tag#4102 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 518.535041] sd 0:0:1:0: [sg0] tag#4102 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 518.543979] sd 0:0:1:0: [sg0] tag#4102 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 518.552901] sd 0:0:1:0: [sg0] tag#4102 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 518.562020] sd 0:0:1:0: [sg0] tag#4102 CDB[70]: 00 00 20 00 00 00 00 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xba4, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006007882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01000000000000002c000000"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7ac, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_MODES_OURS={0x780, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "2baa5c2802527cbe0e73e9eb02de2ba443b25862a13d6355c2e9f0bdc3a6d779cceea63cf77cab822b50782f7fae51cba0a93d4ec50516d23c33a547004cc55b0387810890e5a8dec659270f059f2b1086822c00030b2373b169412c830944a4c8057c949969847a9781799c4bede711d93e8df4fd92a86d1736105a56fb8585c93d3ab76f1fec4adb9934f22e89120df4c80ecc1b540b5b3bca976d398575db44d728d44961010d64a200d304eec928cf2cc4e15f9c682dad0f1a95369b3f49092cbe88b052273f6e04dccd08e257edce6f7ab25e"}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "b9202ddf20e52ed3755283ec261c940c5d9aba9b1a0fae1a702cf1204a256137caf58c2fc7bd659899f177c4bfb21f89bdea980ec7863573cb20b243033e94608f1b222d8e6035dc08210e20352bd609bf5a2f1060a1b3108fa78694fd0dca2a1795e873a63140b9a1e54db1241965c004e64e19605c035c7176846a81a6ae4124c21c17d638f0274db03cb3b325a3f7e0ec3c109026e03c5f6e03e5086c5084756cae5c797ae8eee61959f79a64a376f958d4c25259c25ed9d41adff96068a05aa213d9d3fadbbf64c59190034dd1880898cc179c970cf4e837eaaeb0700165f0681176e20dfb16ee179056041ae5ce82e23709"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "39c369cff67ef898e88c5e752a0863ecf28df678c48f8aa5adf3ea92f21839df8dfcefc55fc462d2c72e7f06c02dd1b64dfa647090cf711eb4a62d4130f1c18845170b5ba6455b6a0303a4877c7399998eb2f5bdb7a15e19402bba0414c9244019aab8d5f8cfef78b5d13e29923b83fc874df54ae5096b03be07f4ea6649230e2d35ddaeb3c145192524440bb82b5fc3f24279f48f9a4402edc15b899153c98a1492759c1661ba87c3b6dc7ecc1c33db1a861159e5800424bd79fd22b837b4eb2f2b34ce09ea76451e2fc5da"}, @ETHTOOL_A_BITSET_BITS={0x1f8, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#-.+%:(}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[!+*@]-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%Xd@\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "8b45f4960f33b5a3f22eeed9ae27836d2eeea346fe9f92993841451ff7adffffec64dd114d2918481db717ba84c7d837ec556fc46d3898ac296cfa286ab7290596f060934266445a046b7e495958e3bbd31737a859a4ba896729995729a806075933e544f4bab28fc2f600a894ebfd169f97ead839781b315dc0ce678b71faeaad15244d8c3d5f751c58643bb3b82c4c46eaf33f1d13103389e8333c4b31f8b6a5aeca63"}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "5ada95c321d63fa042a783d82f18f5ce292d002bb14eb9c7aeee59380439ec80038fd19ca1b3e07656bff4ee3affe164a8713e3158a3d458c1743307cd49b0020d853f62409cc28fed3389741e7cbbe429e4e8325abae5d110c09b3a361f76396807b351e2941f0aca3fa7162937b0474ca440dea3a5fd9488181eaaea50e6de1701088fd1568f7cc0a1ccbd41ac24a1b32ca71b2b8375c8af8bc50a8cdd46b87acbedca37b5cdce3ca1066d64e3ae9917b80b6bfd400c508bc3a87d40e66ecb9984a04b169ec837a6f4d6"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x240200a0}, 0x40004) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x150, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x221ebc6ad438e2ab}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000008000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xc00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 518.814172] sd 0:0:1:0: [sg0] tag#4179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 518.823103] sd 0:0:1:0: [sg0] tag#4179 CDB: Variable length, sa=0x0 [ 518.829710] sd 0:0:1:0: [sg0] tag#4179 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 518.838622] sd 0:0:1:0: [sg0] tag#4179 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 518.847507] sd 0:0:1:0: [sg0] tag#4179 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xe00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 518.856442] sd 0:0:1:0: [sg0] tag#4179 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 518.865404] sd 0:0:1:0: [sg0] tag#4179 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 518.874332] sd 0:0:1:0: [sg0] tag#4179 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 518.883255] sd 0:0:1:0: [sg0] tag#4179 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 518.892172] sd 0:0:1:0: [sg0] tag#4179 CDB[70]: 00 00 20 00 00 00 00 16:10:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000000b000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010000010000000000000051449458e80820a05e30e03c4e0400000000000600020000000000"], 0x30}}, 0x0) 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006008882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x2400, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 519.116012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.142513] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.244198] sd 0:0:1:0: [sg0] tag#4103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 519.253219] sd 0:0:1:0: [sg0] tag#4103 CDB: Variable length, sa=0x0 [ 519.259754] sd 0:0:1:0: [sg0] tag#4103 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 519.268686] sd 0:0:1:0: [sg0] tag#4103 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 519.277683] sd 0:0:1:0: [sg0] tag#4103 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200)={0x6, 0xffff, 0x3, 0x7, 0x2}, 0x14) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7fff) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000001c0)={0x7, 0x2, @name="72c190796bc63e3acc538dbb81fb03bb08e068135dad0443b1d65faf8cc45195"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r4, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x9049b7ea7f9e4095, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x64316da5cb58fed7}]}]}, 0x30}}, 0x0) 16:10:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000fff000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 519.286745] sd 0:0:1:0: [sg0] tag#4103 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 519.297115] sd 0:0:1:0: [sg0] tag#4103 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 519.306600] sd 0:0:1:0: [sg0] tag#4103 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 519.315529] sd 0:0:1:0: [sg0] tag#4103 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 519.324969] sd 0:0:1:0: [sg0] tag#4103 CDB[70]: 00 00 20 00 00 00 00 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x3f00, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000040000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30c14fde25e6ea8c6500000087a7a3a5e1d787e5db2fd2924edf44a25efb605d4b213201e36cbd3ff8d0e71fe1d12b869bc0a8e01ca95df0ce58c5eb0d615d815f1b5f039bf1673b138798b3cf03619a85e1f1401fffce9eef59bf73a8939441a06e3ff6ed12322be530fd8bc5d1382a8b201da4bd9d3b091eccbeca5adff270befb86c5529446ce8735092176d0c88affa1db6edeb9ca6007813188c58bb769b9e74df793b4", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000), 0x4) 16:10:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600a882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 519.474266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x5865, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 519.615447] sd 0:0:1:0: [sg0] tag#4104 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 519.624314] sd 0:0:1:0: [sg0] tag#4104 CDB: Variable length, sa=0x0 [ 519.631018] sd 0:0:1:0: [sg0] tag#4104 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 519.639960] sd 0:0:1:0: [sg0] tag#4104 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 519.648901] sd 0:0:1:0: [sg0] tag#4104 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 519.657782] sd 0:0:1:0: [sg0] tag#4104 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 519.666725] sd 0:0:1:0: [sg0] tag#4104 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 519.675650] sd 0:0:1:0: [sg0] tag#4104 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 519.684604] sd 0:0:1:0: [sg0] tag#4104 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 519.693525] sd 0:0:1:0: [sg0] tag#4104 CDB[70]: 00 00 20 00 00 00 00 16:10:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000080000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000001c0)={0x5, 0x2, 0x8001, 0xfffffffd, 0x3f}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xc01, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4040010) 16:10:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x6558, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b0000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600b882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 520.007755] sd 0:0:1:0: [sg0] tag#4180 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 520.016766] sd 0:0:1:0: [sg0] tag#4180 CDB: Variable length, sa=0x0 [ 520.023301] sd 0:0:1:0: [sg0] tag#4180 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 520.032247] sd 0:0:1:0: [sg0] tag#4180 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 520.041298] sd 0:0:1:0: [sg0] tag#4180 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 520.050233] sd 0:0:1:0: [sg0] tag#4180 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 520.059184] sd 0:0:1:0: [sg0] tag#4180 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 520.068110] sd 0:0:1:0: [sg0] tag#4180 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 520.077085] sd 0:0:1:0: [sg0] tag#4180 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 520.086061] sd 0:0:1:0: [sg0] tag#4180 CDB[70]: 00 00 20 00 00 00 00 16:10:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000100000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xa40b, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000d00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600c882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:56 executing program 5: uselib(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000384e9280060001000a00000000000000000000ba06f4cc000000000000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') 16:10:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000021000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 520.467032] sd 0:0:1:0: [sg0] tag#4181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 520.476123] sd 0:0:1:0: [sg0] tag#4181 CDB: Variable length, sa=0x0 [ 520.482661] sd 0:0:1:0: [sg0] tag#4181 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 520.491601] sd 0:0:1:0: [sg0] tag#4181 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 520.494366] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 520.500541] sd 0:0:1:0: [sg0] tag#4181 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 520.500582] sd 0:0:1:0: [sg0] tag#4181 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 520.526940] sd 0:0:1:0: [sg0] tag#4181 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 520.535894] sd 0:0:1:0: [sg0] tag#4181 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 520.544854] sd 0:0:1:0: [sg0] tag#4181 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 520.553792] sd 0:0:1:0: [sg0] tag#4181 CDB[70]: 00 00 20 00 00 00 00 16:10:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:10:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600e882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 520.760532] sd 0:0:1:0: [sg0] tag#4105 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 520.769529] sd 0:0:1:0: [sg0] tag#4105 CDB: Variable length, sa=0x0 [ 520.775983] sd 0:0:1:0: [sg0] tag#4105 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 520.784959] sd 0:0:1:0: [sg0] tag#4105 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 520.793898] sd 0:0:1:0: [sg0] tag#4105 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x4, 0xfc2) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x60400c4) [ 520.802832] sd 0:0:1:0: [sg0] tag#4105 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 520.811763] sd 0:0:1:0: [sg0] tag#4105 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 520.820689] sd 0:0:1:0: [sg0] tag#4105 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 520.831264] sd 0:0:1:0: [sg0] tag#4105 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 520.840656] sd 0:0:1:0: [sg0] tag#4105 CDB[70]: 00 00 20 00 00 00 00 16:10:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_address={0x3, 0x5}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@dev, @in=@remote}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @multicast2}, @in6={0x2, 0x0, 0x0, @mcast2}}]}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, '-{\xef'}, {0x20, '/dev/vcsu#\x00'}, {0x20, 'IPVS\x00'}, {0x20, '/dev/vcsu#\x00'}], 0xa, "52fc020c537c44daf71b9fe012f34759e7cca1e8585cbe695b90810dfe4cdd75c62e839cf33b4924ee674a76673be0e1d48c1d2c099afb6a38ac48b90f259549ef9e4c7c254ad3e719e6ee54a1b62dba0e863ed13e2e638885ccadc31a087de999b1504d5b2bc72462e8dd7b835ec46873afdd94615edede4401f36497a33ed4240808621e55a48424f57486bde33ba74a78a5e577085e09f28cc4fec534748dbad7182667b7b3739e4444e54ac11198a385"}, 0xdf) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000080)="08ef8d6f14410ceca8b26bcdc6e3777e6728af286fe3c0f5c29d726f34c3315548df8dd061a97fb5c5aad55f76ddf16672e78c2d49399914935a31ba414958a356a723bec362e0e41b5f314cfa2f0b85c883251eb5459e82ab2894857656ecdda6f48fbd7d18e0b48fe528b619c5587bf73fc8dfb1b90c714d654c53affc60b173d673e48ce8a691ac5a94841c90fbc0") sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000480)={{0x1, 0x0, @reserved="3acc2835deaaa2a834adb08b8dd6ba8d552f15ed54f36b971ea95b4ecf864d88"}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) 16:10:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000041000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600f882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001006703822b1831ea1dba55541b2ca17900001c000180060000060000000000000000"], 0x30}}, 0x0) 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 521.173922] sd 0:0:1:0: [sg0] tag#4106 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 521.182854] sd 0:0:1:0: [sg0] tag#4106 CDB: Variable length, sa=0x0 [ 521.189402] sd 0:0:1:0: [sg0] tag#4106 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 521.198396] sd 0:0:1:0: [sg0] tag#4106 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 521.207284] sd 0:0:1:0: [sg0] tag#4106 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/self/net/pfkey\x00', 0x4480, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000667fff7fa9b1a03300", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) [ 521.216261] sd 0:0:1:0: [sg0] tag#4106 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 521.225209] sd 0:0:1:0: [sg0] tag#4106 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 521.234181] sd 0:0:1:0: [sg0] tag#4106 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 521.244655] sd 0:0:1:0: [sg0] tag#4106 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 521.253590] sd 0:0:1:0: [sg0] tag#4106 CDB[70]: 00 00 20 00 00 00 00 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00faea5618e57f1decf0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000000000006000200"/42], 0x30}}, 0x0) 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:57 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006012882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2404c8e5}, 0x2004c810) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 16:10:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 521.791771] sd 0:0:1:0: [sg0] tag#4182 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 521.800672] sd 0:0:1:0: [sg0] tag#4182 CDB: Variable length, sa=0x0 [ 521.807143] sd 0:0:1:0: [sg0] tag#4182 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 521.816183] sd 0:0:1:0: [sg0] tag#4182 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 521.825134] sd 0:0:1:0: [sg0] tag#4182 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006015882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 521.834083] sd 0:0:1:0: [sg0] tag#4182 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 521.843186] sd 0:0:1:0: [sg0] tag#4182 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 521.852209] sd 0:0:1:0: [sg0] tag#4182 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 521.861157] sd 0:0:1:0: [sg0] tag#4182 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 521.870125] sd 0:0:1:0: [sg0] tag#4182 CDB[70]: 00 00 20 00 00 00 00 16:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x0, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x0, 0x3, 0x1}]}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40880) 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006016882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 522.045914] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 522.089537] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000280)) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x410000) sendto$netrom(r4, &(0x7f00000001c0)="e0fc5998ec10cc59b9d5190e96bfa63ea48376c12a3b756efa492f05e593dccb60c18528953dcd1f4ba6c0f851a5b27294c2401840a893c017f974f7312682a3fb5a593a2d8221f3cae191b74646899a19b417ead576840c3ebaf7bd23804200bde960a9e9cb4a2dc749a6747b228bc57430ad131c22bdf25411968d60fb386ed0f0b99c3b679233dab6031ad8cd2ce57f737a8dce3b20a51bf4da", 0x9b, 0x40091, &(0x7f00000000c0)={{0x3, @bcast, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x1f}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x38}}, 0x0) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006017882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000101000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006018882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 522.269672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006019882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 522.344788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 16:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x4, 0x5, 0x7ff, 0x40, 0xb}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600420000000000"], 0x30}}, 0x0) 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000221000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000601a882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xb000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000280)={0x9e0000, 0x80000000, 0x400, r0, 0x0, &(0x7f0000000200)={0x9f0902, 0x567d, [], @string=&(0x7f00000001c0)=0x5}}) r4 = socket$inet(0x2, 0x2, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r6, 0x1ff}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r6, 0x8, 0x20, 0x0, 0x7a}, &(0x7f0000000080)=0x18) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000601b882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xc000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:58 executing program 5: ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) ptrace$getsig(0x4202, 0x0, 0x1, &(0x7f0000000080)) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000601c882000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x10001], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="c80000006f76745742f1393fc2dc827f35a2a3e73a5da96cea5f0ac225ccf97d7146d81fb3b4a49910a1655317c64fd7725d435fbde948e776b222ee98a5506be5a6a6a6d7b95564c7361f30625f9a3989096fd7335e20c8cdc2deb22592c7018af4b089dc9dea2c01e1120a3ef08dac6801adfce9e692670d5fd6bd0b294ddf965884c694c136eb41f73bc01bf11fd57d0f76927b35430d9f5bf060d263e362b9bcaff1ec72e7361e4f755d8601da892fb3bc6f46c7df77fc23d61fb025492cc98ab8cf", @ANYRES16=r1, @ANYBLOB="000402000000fedbdf250a0000000800040000000001180001800c0007001000000004000000080005000300000014000380080005000a01010208000300030000000c00028005000d00000000002400028005000d00010000000800080008000000080005000000010008000700008000000800060004000000480001800800050004000000070006006c6300000600020084000000060004004e220000060002000000000008000500020000000c000700080000001100000008000b0073697000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000000a}, 0x8084) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x200}]}, 0x3c}}, 0x840) 16:10:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000607e8f2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xe000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000607f8f2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x3c, r1, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x3c}}, 0x4092) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x123140, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@pptp={0x18, 0x2, {0x0, @loopback}}, {&(0x7f0000000080)=""/173, 0xad}, &(0x7f00000001c0), 0x5}, 0xa0) 16:10:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060ffff8000000000000040000000000008000000", 0x200000bf}], 0x2) [ 523.010621] audit: type=1400 audit(1600963859.076:63): avc: denied { write } for pid=2508 comm="syz-executor.5" name="net" dev="proc" ino=101923 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 16:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 523.125182] audit: type=1400 audit(1600963859.106:64): avc: denied { add_name } for pid=2508 comm="syz-executor.5" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 16:10:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000001000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000f01000000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x4000000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) [ 523.249791] audit: type=1400 audit(1600963859.116:65): avc: denied { create } for pid=2508 comm="syz-executor.5" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 16:10:59 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x53, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00@', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000000000400ff030000"], 0x30}}, 0x10) r3 = syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000280)="790b703568695a4fecd4820ef7339a53dbf8c3bae8caa2a653f00a5bd7e7d0e65c165897b19023dda2edef2914f1d56aabbc42013ebdf8fc50302a834a1b1cbae43e995868e7592f4da35fe48a6e80f20d2185d6bd9937aa1579fecda8d84eb51fccc441a7f0a14a708dc4fb8f749ffd1b68cee1f7f33302995df71fb7c552aa29e07d0f71f6501b4611bb5a0ec6", 0x8e}, {&(0x7f00000000c0)="2ff3e26d18102a22e814ab37adbff43515e50ac6e81d282c6c360c4f81fd2f", 0x1f, 0x4}, {&(0x7f00000003c0)="eef20b88920c5c02c3dbd73da92e88c06acf9d3d9da8203407d13d8289f7bc7340e4905226bed734166baf28404bd085fa1bf08f9c19ec1462546f3d15c8e93383290934f1719c32a2d557c3caddb7feaea50aaa219f85d4b8d35df5d34e704a58969c88eb7d0f2149683e82722ce90bd3287b5f51ea443216205f92704621de40c1ee5d1eb6c5d238f969085ddb875218bbe9dcd9", 0x95, 0xc1ab}], 0x200000, &(0x7f0000000100)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@audit='audit'}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = accept4(r4, 0x0, &(0x7f0000000340), 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r6, 0x400443c9, &(0x7f0000000480)={@none, 0xeaa8}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) tee(r3, r5, 0x3b, 0x4) [ 523.319512] scsi_io_completion_action: 11 callbacks suppressed [ 523.319562] sd 0:0:1:0: [sg0] tag#4183 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 523.334591] sd 0:0:1:0: [sg0] tag#4183 CDB: Variable length, sa=0x0 [ 523.341103] sd 0:0:1:0: [sg0] tag#4183 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 523.350147] sd 0:0:1:0: [sg0] tag#4183 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 523.359075] sd 0:0:1:0: [sg0] tag#4183 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x24000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 523.368017] sd 0:0:1:0: [sg0] tag#4183 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 523.376923] sd 0:0:1:0: [sg0] tag#4183 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 523.385861] sd 0:0:1:0: [sg0] tag#4183 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 523.394796] sd 0:0:1:0: [sg0] tag#4183 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 523.403734] sd 0:0:1:0: [sg0] tag#4183 CDB[70]: 00 00 20 00 00 00 00 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x3f000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001400000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000003000000000040000000000008000000", 0x200000bf}], 0x2) 16:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x14000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c014) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x2, 0x70bd2f, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x808}, 0x0) [ 523.642477] sd 0:0:1:0: [sg0] tag#4107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 523.651561] sd 0:0:1:0: [sg0] tag#4107 CDB: Variable length, sa=0x0 [ 523.658098] sd 0:0:1:0: [sg0] tag#4107 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 523.666990] sd 0:0:1:0: [sg0] tag#4107 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 523.676044] sd 0:0:1:0: [sg0] tag#4107 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x60000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:10:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffa, 0x20042) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}], 0x1, 0x0, [], 0x1, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)={0x7ac, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_MODES_OURS={0x780, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "2baa5c2802527cbe0e73e9eb02de2ba443b25862a13d6355c2e9f0bdc3a6d779cceea63cf77cab822b50782f7fae51cba0a93d4ec50516d23c33a547004cc55b0387810890e5a8dec659270f059f2b1086822c00030b2373b169412c830944a4c8057c949969847a9781799c4bede711d93e8df4fd92a86d1736105a56fb8585c93d3ab76f1fec4adb9934f22e89120df4c80ecc1b540b5b3bca976d398575db44d728d44961010d64a200d304eec928cf2cc4e15f9c682dad0f1a95369b3f49092cbe88b052273f6e04dccd08e257edce6f7ab25e"}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "b9202ddf20e52ed3755283ec261c940c5d9aba9b1a0fae1a702cf1204a256137caf58c2fc7bd659899f177c4bfb21f89bdea980ec7863573cb20b243033e94608f1b222d8e6035dc08210e20352bd609bf5a2f1060a1b3108fa78694fd0dca2a1795e873a63140b9a1e54db1241965c004e64e19605c035c7176846a81a6ae4124c21c17d638f0274db03cb3b325a3f7e0ec3c109026e03c5f6e03e5086c5084756cae5c797ae8eee61959f79a64a376f958d4c25259c25ed9d41adff96068a05aa213d9d3fadbbf64c59190034dd1880898cc179c970cf4e837eaaeb0700165f0681176e20dfb16ee179056041ae5ce82e23709"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "39c369cff67ef898e88c5e752a0863ecf28df678c48f8aa5adf3ea92f21839df8dfcefc55fc462d2c72e7f06c02dd1b64dfa647090cf711eb4a62d4130f1c18845170b5ba6455b6a0303a4877c7399998eb2f5bdb7a15e19402bba0414c9244019aab8d5f8cfef78b5d13e29923b83fc874df54ae5096b03be07f4ea6649230e2d35ddaeb3c145192524440bb82b5fc3f24279f48f9a4402edc15b899153c98a1492759c1661ba87c3b6dc7ecc1c33db1a861159e5800424bd79fd22b837b4eb2f2b34ce09ea76451e2fc5da"}, @ETHTOOL_A_BITSET_BITS={0x1f8, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#-.+%:(}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[!+*@]-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%Xd@\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "8b45f4960f33b5a3f22eeed9ae27836d2eeea346fe9f92993841451ff7adffffec64dd114d2918481db717ba84c7d837ec556fc46d3898ac296cfa286ab7290596f060934266445a046b7e495958e3bbd31737a859a4ba896729995729a806075933e544f4bab28fc2f600a894ebfd169f97ead839781b315dc0ce678b71faeaad15244d8c3d5f751c58643bb3b82c4c46eaf33f1d13103389e8333c4b31f8b6a5aeca63"}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "5ada95c321d63fa042a783d82f18f5ce292d002bb14eb9c7aeee59380439ec80038fd19ca1b3e07656bff4ee3affe164a8713e3158a3d458c1743307cd49b0020d853f62409cc28fed3389741e7cbbe429e4e8325abae5d110c09b3a361f76396807b351e2941f0aca3fa7162937b0474ca440dea3a5fd9488181eaaea50e6de1701088fd1568f7cc0a1ccbd41ac24a1b32ca71b2b8375c8af8bc50a8cdd46b87acbedca37b5cdce3ca1066d64e3ae9917b80b6bfd400c508bc3a87d40e66ecb9984a04b169ec837a6f4d6"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x240200a0}, 0x40004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfa}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008801) [ 523.684962] sd 0:0:1:0: [sg0] tag#4107 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 523.695473] sd 0:0:1:0: [sg0] tag#4107 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 523.704708] sd 0:0:1:0: [sg0] tag#4107 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 523.713634] sd 0:0:1:0: [sg0] tag#4107 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 523.722550] sd 0:0:1:0: [sg0] tag#4107 CDB[70]: 00 00 20 00 00 00 00 16:10:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000022300000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:10:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:10:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x65580000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="203134c4", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000e0f000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 16:11:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x40000) 16:11:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 524.115288] sd 0:0:1:0: [sg0] tag#4108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 524.124171] sd 0:0:1:0: [sg0] tag#4108 CDB: Variable length, sa=0x0 [ 524.130903] sd 0:0:1:0: [sg0] tag#4108 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 524.139850] sd 0:0:1:0: [sg0] tag#4108 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 524.148799] sd 0:0:1:0: [sg0] tag#4108 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 524.157738] sd 0:0:1:0: [sg0] tag#4108 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 524.166650] sd 0:0:1:0: [sg0] tag#4108 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 524.175595] sd 0:0:1:0: [sg0] tag#4108 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 524.184524] sd 0:0:1:0: [sg0] tag#4108 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 524.193455] sd 0:0:1:0: [sg0] tag#4108 CDB[70]: 00 00 20 00 00 00 00 16:11:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x93e8, 0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x0, {{0xa, 0x4e24, 0x6, @mcast1, 0x6}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x5, {{0x2, 0x4e21, @broadcast}}, 0x0, 0x6, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e23, @loopback}}]}, 0x390) r2 = getpid() tkill(r2, 0x3d) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="01400000000000000000010000000c009bed0600010000001000"], 0x20}}, 0x0) 16:11:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000003b100000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e33, 0x1000004, @private2, 0x2}}}, &(0x7f0000000000)=0x84) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000000100"/26], 0x20}}, 0x44891) 16:11:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xa40b0000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000e10000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000001000000005dc7aedace4a01b06b6e7a8f22fd81abf3bc665d655fb9e6183b0799fd0537b6ccb3dfa68a9de0b88ddc1097a54cf67561d64b78e3bd082ceb6b6c4695a845dd1ea37ba65bc563e48263640d22a86585ad5852a0fe01ce577bfccc7731a0a6"], 0x20}}, 0x0) [ 524.681399] sd 0:0:1:0: [sg0] tag#4184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 524.690488] sd 0:0:1:0: [sg0] tag#4184 CDB: Variable length, sa=0x0 [ 524.696961] sd 0:0:1:0: [sg0] tag#4184 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 524.705930] sd 0:0:1:0: [sg0] tag#4184 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 524.714879] sd 0:0:1:0: [sg0] tag#4184 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fb00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00018006000100000000005afc782b64cfa754b57437b36895a61a4e574ec5dfe4f3f552c58dd7db3951a668d747e98ca541af25e5027ef86a56c3fa0afcf67a3f71c9d6c26ac960c8b89c74c5f01af4807127bfb3"], 0x20}}, 0x0) [ 524.723847] sd 0:0:1:0: [sg0] tag#4184 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 524.732823] sd 0:0:1:0: [sg0] tag#4184 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 524.741741] sd 0:0:1:0: [sg0] tag#4184 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 524.750677] sd 0:0:1:0: [sg0] tag#4184 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 524.759594] sd 0:0:1:0: [sg0] tag#4184 CDB[70]: 00 00 20 00 00 00 00 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xf1ffffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0xc084) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000fffb00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xfcffffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000030000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:01 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000777ad27945fecfb8a371a7faa9e1857c275c88d045e09271a6cbc3691ad91536f09b26bff9a4f06eb76cbb8a495684acdffe55f3d298d3d4209d8d9ef523aad482ca47603fe6362943df732a24a4f7f4171904e4f9d288b7881125a814280ea53e0ca3ab70d571a72b12e8e40d0e2a1f97b5a56ba45bf68e2144f68ae0a71a9daecdfe75460a22acae60b200868522b13544a0a83867a6fc9464e8e98c9f744b63958888e9e34997ada61fa8a1d596206da5e701b521", @ANYRESOCT, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000fffc00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) getrusage(0x0, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000) [ 525.176338] sd 0:0:1:0: [sg0] tag#4185 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 525.185296] sd 0:0:1:0: [sg0] tag#4185 CDB: Variable length, sa=0x0 [ 525.191855] sd 0:0:1:0: [sg0] tag#4185 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 525.200793] sd 0:0:1:0: [sg0] tag#4185 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 525.209730] sd 0:0:1:0: [sg0] tag#4185 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xffffa888, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$USBDEVFS_RESET(r1, 0x5514) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x408, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_NRMIDIS(r8, 0x8004510b, &(0x7f00000000c0)) 16:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) [ 525.218673] sd 0:0:1:0: [sg0] tag#4185 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 525.227615] sd 0:0:1:0: [sg0] tag#4185 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 525.236507] sd 0:0:1:0: [sg0] tag#4185 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 525.245456] sd 0:0:1:0: [sg0] tag#4185 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 525.254396] sd 0:0:1:0: [sg0] tag#4185 CDB[70]: 00 00 20 00 00 00 00 16:11:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1e2c2d39", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) [ 525.474642] sd 0:0:1:0: [sg0] tag#4186 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 525.483594] sd 0:0:1:0: [sg0] tag#4186 CDB: Variable length, sa=0x0 [ 525.490145] sd 0:0:1:0: [sg0] tag#4186 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 525.499078] sd 0:0:1:0: [sg0] tag#4186 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 525.508136] sd 0:0:1:0: [sg0] tag#4186 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000040c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 525.517025] sd 0:0:1:0: [sg0] tag#4186 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 525.526470] sd 0:0:1:0: [sg0] tag#4186 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 525.535410] sd 0:0:1:0: [sg0] tag#4186 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 525.544340] sd 0:0:1:0: [sg0] tag#4186 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 525.553278] sd 0:0:1:0: [sg0] tag#4186 CDB[70]: 00 00 20 00 00 00 00 16:11:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000080c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x600, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x800) 16:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:11:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="22d63e68", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002a9d700000000000010000000c000180060004004e200000"], 0x20}}, 0x0) 16:11:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000200c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000500000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 526.014719] sd 0:0:1:0: [sg0] tag#4189 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 526.023664] sd 0:0:1:0: [sg0] tag#4189 CDB: Variable length, sa=0x0 [ 526.030220] sd 0:0:1:0: [sg0] tag#4189 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 526.039158] sd 0:0:1:0: [sg0] tag#4189 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 526.048098] sd 0:0:1:0: [sg0] tag#4189 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) 16:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x64982, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x2, 0x0, {0x3, 0x3, 0x3, 0x3, 0x401}, 0xfffff001}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000302000000fedbdf25010000000c0001880600010002000000"], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fbdb215adf250b000000080005000100000034000180060002003c000000060004004e2200000c000700040000002200000014000300fe8000000000000000000000000000bbaae7e1c7d72ebf56c153a6998b4835583abce5f8da7262f15d132d4e0b50fe429b6016eaa344da7b83e81724e7d44714014777549c17e7171c4ae16bf2334244761bcbfbfd06fac7f4c87101"], 0x50}, 0x1, 0x0, 0x0, 0x8008040}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x110, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x88}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x37}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6dcb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x80000dc) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x0, 0x7, 0xff01, 0x3, 0x3, "9fe1e85ff17205a7"}) getsockname$inet(r1, &(0x7f0000000400)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10) [ 526.057026] sd 0:0:1:0: [sg0] tag#4189 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 526.065965] sd 0:0:1:0: [sg0] tag#4189 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 526.074886] sd 0:0:1:0: [sg0] tag#4189 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 526.083860] sd 0:0:1:0: [sg0] tag#4189 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 526.092803] sd 0:0:1:0: [sg0] tag#4189 CDB[70]: 00 00 20 00 00 00 00 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xfffffff1, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a773c0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20000014) 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xfffffffc, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a77440c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00i', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001013f203a819a013fc34ca1084468e3fe01fa7318476fa2b24f56fccbadfba63ce1136fa62b20c7b18a48c9ca1e17e00ebdff3385b5065bc2e95e8ace3b0c704673728bdd5c4b085ca99a80008b7248d2686a005640acbc436722e4ff7194cc2cb5144f613677a4f3715bd6b65f6da610b27695e6e614d56d7b500ff116820e1b659bb5d3c5a9a250c711e3a5ea150f32625dab25d40dcf53ee9b3ace5a33149cd212d0fbbc7c96d0989c8f30524df6cc2e28940dd4c558b4c77192644220307b5e473", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000700000000000040000000000008000000", 0x200000bf}], 0x2) [ 526.541476] sd 0:0:1:0: [sg0] tag#4190 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 526.550391] sd 0:0:1:0: [sg0] tag#4190 CDB: Variable length, sa=0x0 [ 526.556862] sd 0:0:1:0: [sg0] tag#4190 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 526.565909] sd 0:0:1:0: [sg0] tag#4190 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 526.574911] sd 0:0:1:0: [sg0] tag#4190 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x400) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r2, 0x4, 0x384c474d, 0x9000000}) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000100)) 16:11:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a7dcc0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:02 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xf, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 526.583867] sd 0:0:1:0: [sg0] tag#4190 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 526.592797] sd 0:0:1:0: [sg0] tag#4190 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 526.601735] sd 0:0:1:0: [sg0] tag#4190 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 526.610666] sd 0:0:1:0: [sg0] tag#4190 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 526.619616] sd 0:0:1:0: [sg0] tag#4190 CDB[70]: 00 00 20 00 00 00 00 16:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mISDNtimer\x00', 0x94200, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 16:11:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20181, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000080)) 16:11:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a7dd00c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x10, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:02 executing program 4: r0 = syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="2c941b417ea314acdee3334340229d", 0xf, 0x7ff}], 0x30804, &(0x7f00000001c0)={[{@nointegrity='nointegrity'}, {@usrquota='usrquota'}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@grpquota='grpquota'}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodiscard='nodiscard'}]}) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x8000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000002c0)={0x378, 0x4e, 0x200, 0x80000000, [], [], [], 0xfffff001, 0x3f, 0x800, 0x5, "65e769bcf71dd10c699295986116e2e7"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={0x0, 0x1, 0x100000001, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000c40)={0x13, 0x4, {0x1c000000000, @struct={0xffff, 0xacd2}, 0x0, 0x4, 0x5, 0xde, 0x3, 0x5106, 0x480, @usage=0xffffffff, 0x98e6, 0x8001, [0x5, 0x69, 0x500000000000000, 0x9, 0x10000, 0x400]}, {0x5, @usage=0x845, r7, 0xffffffffffffffff, 0x6, 0x5c8a, 0x3, 0x5, 0x2a, @usage, 0x4, 0x20c8, [0x4, 0x1, 0x3, 0x40, 0x1000, 0x1]}, {0x1000, @usage=0x2, r8, 0x8a76, 0x2, 0x8, 0xacd, 0x3ff, 0x80, @struct={0x3, 0x40}, 0x81, 0x1, [0xe7f, 0x4, 0x7b9a, 0x101, 0xff, 0xfff]}, {0x2, 0x800, 0x7}}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002000018006bb2e7dc7655b24aa00070000000000100000000600020000000000"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfe, {0x4, 0x0, 0x2, r4, 0x11600, 0x8, 0x2, 0x1ff, 0x0, 0x1f}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x1) 16:11:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a7dd40c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000900000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x23, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a7dd80c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 527.146338] sd 0:0:1:0: [sg0] tag#4191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 527.155445] sd 0:0:1:0: [sg0] tag#4191 CDB: Variable length, sa=0x0 [ 527.162005] sd 0:0:1:0: [sg0] tag#4191 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 527.170968] sd 0:0:1:0: [sg0] tag#4191 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 527.179951] sd 0:0:1:0: [sg0] tag#4191 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in={{0x2, 0x4e25, @multicast1}}}, &(0x7f0000000340)=0x84) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="d3fbe89502a9c1c80c0c2642fe27783f597d1a605e36e20911a3510aa39fe259ec2de8fc9a149e4e7dc370aa925a075f9b3c6d3c2ca36de517ad2c747376e5fc2b7cb099f631305bdcd952a37da5f6bd79c35aec37736055fd050723e52002d4d893babe348614693d86d449ac811d534f8261a3fc093bbaf4780f4175606b4c6710ed25947d4668d6176f3950936331988a26153cd26664472e10db58ad11703b4dc3ece258fcfbf19d0ced4a4dec3fff99905a160960f0b58e04f3", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000180"], 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/seq\x00', 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000400)) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40) 16:11:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, r1, 0x1, 0x2, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xfffffffffffffde6, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7e}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x78}}, 0x4000080) 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 527.188890] sd 0:0:1:0: [sg0] tag#4191 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 527.197817] sd 0:0:1:0: [sg0] tag#4191 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 527.206699] sd 0:0:1:0: [sg0] tag#4191 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 527.215622] sd 0:0:1:0: [sg0] tag#4191 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 527.224554] sd 0:0:1:0: [sg0] tag#4191 CDB[70]: 00 00 20 00 00 00 00 16:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc001) 16:11:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000a7de00c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 527.299350] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xec0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 527.357050] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. 16:11:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$ax25(r2, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @remote, @default, @bcast, @rose, @bcast, @bcast]}, &(0x7f0000000100)=0x48) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="179d6cba", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020087000000"], 0x30}}, 0x0) 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x33fe0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000a00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x200005d8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2000000000, 0x8000) ioctl$TCFLSH(r2, 0x540b, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nl80211(0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xff, 0x3b}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa8}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x1f}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 16:11:03 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, '\x91/}&\'+.-/{-'}}, {@seclabel='seclabel'}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000200000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 527.676384] sd 0:0:1:0: [sg0] tag#4130 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 527.686865] sd 0:0:1:0: [sg0] tag#4130 CDB: Variable length, sa=0x0 [ 527.693888] sd 0:0:1:0: [sg0] tag#4130 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 527.702829] sd 0:0:1:0: [sg0] tag#4130 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 527.711760] sd 0:0:1:0: [sg0] tag#4130 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 527.720693] sd 0:0:1:0: [sg0] tag#4130 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 527.729636] sd 0:0:1:0: [sg0] tag#4130 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 527.738584] sd 0:0:1:0: [sg0] tag#4130 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 527.747533] sd 0:0:1:0: [sg0] tag#4130 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 527.756428] sd 0:0:1:0: [sg0] tag#4130 CDB[70]: 00 00 20 00 00 00 00 16:11:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000d00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x7ffff000, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:03 executing program 5: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xa74852a14978a876) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000f0e00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="5a084a153eacaf6521bfc1d4af58845c018f84ebbae2c7", 0x17, 0x3}], 0x100000, &(0x7f0000000300)={[{@part={'part', 0x3d, 0xffffffffffffc903}}, {@umask={'umask', 0x3d, 0x7ff}}], [{@fowner_gt={'fowner>', r2}}, {@seclabel='seclabel'}]}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044830}, 0x0) 16:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="104bfa04", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000100e00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xfffffdef, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001400000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000022000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:04 executing program 4: accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0xf, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x101400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", ""]}, 0x68}}, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1fc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x20) 16:11:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000032000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'lo\x00', {0x1f574000}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) 16:11:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000042000000000000040000000000008000000", 0x200000bf}], 0x2) [ 528.297971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=2999 comm=syz-executor.1 [ 528.407526] scsi_io_completion_action: 4 callbacks suppressed [ 528.407662] sd 0:0:1:0: [sg0] tag#4192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 528.422625] sd 0:0:1:0: [sg0] tag#4192 CDB: Variable length, sa=0x0 [ 528.429129] sd 0:0:1:0: [sg0] tag#4192 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 528.438065] sd 0:0:1:0: [sg0] tag#4192 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 528.446949] sd 0:0:1:0: [sg0] tag#4192 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x10, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x8, 0x85f44e689fb4bf65, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x23d}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x2404c8c5) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000400", @ANYRES16=r1, @ANYBLOB="000402000000000000000100000000000500960c0000"], 0x28}}, 0x40016) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) [ 528.456064] sd 0:0:1:0: [sg0] tag#4192 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 528.464995] sd 0:0:1:0: [sg0] tag#4192 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 528.474346] sd 0:0:1:0: [sg0] tag#4192 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 528.483306] sd 0:0:1:0: [sg0] tag#4192 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 528.492229] sd 0:0:1:0: [sg0] tag#4192 CDB[70]: 00 00 20 00 00 00 00 16:11:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000052000000000000040000000000008000000", 0x200000bf}], 0x2) [ 528.573061] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 16:11:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x11, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:04 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r4, 0x100000000, 0x4e09, 0x6a00000000000}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xffffff0d) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x88, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) [ 528.629469] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 528.697806] sd 0:0:1:0: [sg0] tag#4193 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 528.706761] sd 0:0:1:0: [sg0] tag#4193 CDB: Variable length, sa=0x0 [ 528.713448] sd 0:0:1:0: [sg0] tag#4193 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 528.722469] sd 0:0:1:0: [sg0] tag#4193 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 528.731410] sd 0:0:1:0: [sg0] tag#4193 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fb00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 528.740343] sd 0:0:1:0: [sg0] tag#4193 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 528.749269] sd 0:0:1:0: [sg0] tag#4193 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 528.758194] sd 0:0:1:0: [sg0] tag#4193 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 528.767164] sd 0:0:1:0: [sg0] tag#4193 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 528.776057] sd 0:0:1:0: [sg0] tag#4193 CDB[70]: 00 00 20 00 00 00 00 16:11:04 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5a0, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) fsync(r8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f00000001c0)={0x7, 0x4, 0x8}) 16:11:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000280)=""/72) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f00000001c0)) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) [ 528.810828] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 16:11:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fc00000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000062000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x12, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 528.901284] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 16:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000100008000000000000c00018006f5f9e043a9e755f86550264c4b4600010000000000"], 0x20}}, 0x0) 16:11:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000004000006000400000000000600020000000000"], 0x30}}, 0x0) [ 529.042956] sd 0:0:1:0: [sg0] tag#4194 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 529.051899] sd 0:0:1:0: [sg0] tag#4194 CDB: Variable length, sa=0x0 [ 529.055868] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.058447] sd 0:0:1:0: [sg0] tag#4194 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 529.058489] sd 0:0:1:0: [sg0] tag#4194 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 529.067838] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.076031] sd 0:0:1:0: [sg0] tag#4194 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 529.102411] sd 0:0:1:0: [sg0] tag#4194 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 529.111497] sd 0:0:1:0: [sg0] tag#4194 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 529.120423] sd 0:0:1:0: [sg0] tag#4194 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 529.129354] sd 0:0:1:0: [sg0] tag#4194 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 16:11:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180e60001000000000006000400000000000600020000000000"], 0x30}}, 0x4000000) 16:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000096fbddc2f2a25f0fe02700"/24, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x13, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002302000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 529.138284] sd 0:0:1:0: [sg0] tag#4194 CDB[70]: 00 00 20 00 00 00 00 [ 529.156782] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.172353] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. 16:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000dba49d9ebf5e43b55160594cffbb19f66fccda1c", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x10b002, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000001c0)) 16:11:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f65", 0x81ff, 0x4c1d0000, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c00014d80060001000000000006030400000000020000000000000000"], 0x30}}, 0x0) 16:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="00022abd7000ffdbdf251600000064000580340002800800010020000000080001000800000008000300080000000800020003000000080004000000010008000100130000002c00028008000300000200000800010002000000080001000000080001000d00000008000400000400003400038008000100000000000800020032ccdae208000100070000000800020001000000080002000900000008000200ff0000004400098008000200050000000800010000000000080001000300000008000200020000000800010002000000080001000000000008000100080000000800020008000000"], 0xf0}}, 0x20004004) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x40000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000072000000000000040000000000008000000", 0x200000bf}], 0x2) [ 529.543044] sd 0:0:1:0: [sg0] tag#4195 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 529.552044] sd 0:0:1:0: [sg0] tag#4195 CDB: Variable length, sa=0x0 [ 529.558581] sd 0:0:1:0: [sg0] tag#4195 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 529.567543] sd 0:0:1:0: [sg0] tag#4195 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 529.576437] sd 0:0:1:0: [sg0] tag#4195 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000082000000000000040000000000008000000", 0x200000bf}], 0x2) [ 529.585398] sd 0:0:1:0: [sg0] tag#4195 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 529.594362] sd 0:0:1:0: [sg0] tag#4195 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 529.603298] sd 0:0:1:0: [sg0] tag#4195 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 529.612243] sd 0:0:1:0: [sg0] tag#4195 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 529.621182] sd 0:0:1:0: [sg0] tag#4195 CDB[70]: 00 00 20 00 00 00 00 [ 529.732617] sd 0:0:1:0: [sg0] tag#4196 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 529.741609] sd 0:0:1:0: [sg0] tag#4196 CDB: Variable length, sa=0x0 [ 529.748179] sd 0:0:1:0: [sg0] tag#4196 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 529.757262] sd 0:0:1:0: [sg0] tag#4196 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 529.766152] sd 0:0:1:0: [sg0] tag#4196 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 529.775115] sd 0:0:1:0: [sg0] tag#4196 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 529.784087] sd 0:0:1:0: [sg0] tag#4196 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 529.793034] sd 0:0:1:0: [sg0] tag#4196 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 529.801987] sd 0:0:1:0: [sg0] tag#4196 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 529.810948] sd 0:0:1:0: [sg0] tag#4196 CDB[70]: 00 00 20 00 00 00 00 16:11:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000b103000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:11:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x14, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000b1", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000092000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "7a356c252048c406", "8b33c3e6301930051a664a9385a149afb07c2c5f31b0b759a972b75bedbdb90c", "d30bce0e", "238203f5e35e9e7a"}, 0x38) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x618, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x5e0, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0006bb9bfe4c1e3b9cd3a1793abedb50956581a7ab361e789e83caaa053a34f3"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e90be9436b1dc0d842df165449eb5e63c9752f72ee87c150b6e6d77500558baa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5dd801d7c5ef2b5f8e68f83480419ef653b311cd130cd5231817300"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x35}}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x374, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000000b000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x15, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 530.317185] sd 0:0:1:0: [sg0] tag#4131 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 530.326092] sd 0:0:1:0: [sg0] tag#4131 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 530.335017] sd 0:0:1:0: [sg0] tag#4131 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 530.343945] sd 0:0:1:0: [sg0] tag#4131 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 530.354708] sd 0:0:1:0: [sg0] tag#4131 CDB[70]: 00 00 20 00 00 00 00 16:11:06 executing program 4: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x81, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00018006000100000000001c00018006000008000900"/54], 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000240)={0x7f}, 0x1) 16:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x8, 0x8, 0x29, 0x800009, 0x2, 0x3, 0x6, 0x2c3, 0x38, 0xc, 0x7f, 0x8001, 0x20, 0x1, 0x61b3, 0x6, 0x5}, [{0x60000000, 0x0, 0xda5, 0x3, 0x1, 0x7, 0x98, 0x1000}], "3ce8465b8b34c8001ca274dcff958f8e3268c1220f292ca8d63e334a0c6d745b46521be6598414ed6b49689b05c6fb4a85aec2d7600c6de38d59aa8834b23236a4233e17e66624db134491696ea5b334670b8cb876ac299d9024bdb9f1aa00affe74c32b61d025554a8ab587e053887ff2d053068dd82f531e4a087da732da161cb2b0523eab7791b11df426ea1fb30c8834c0da206d97a0e337c8f496c741b9b40a14e4f0b6a45e73ca3c81537d04401b45fd5eb621b3648a3ab13ecb8546403494f4d9a216c1015a3e3a07d7e623b18097a1824b74e03f6e67dd1e5b43abb8b8de5033eb7bde242e0f22c2237af50b145bbeceeae5b85abdf7dbbde91a1a869377eb3a7172eafea7e241c9a76e08502e9fd878115d93a748b0c43cf14f79d798fe787c35302437b5f42b3fec3d6af86141a9949b9722cf92af12170476b1a7bdc8ffec7661751b44dce5be45e02dec308161bffe07957579dcc0c8fcdd0727c726f7b158a88e58a68e09ab555c8f992c8535aa436351f5229635cba65515a941b31eff6f6b9ddc67d76119a5089525f00e7c657007be3beda3a58b2775d78851acd7903bff28e3e84a43df0cbccd432932265aabcf13ee5c29681249029684b51f592ade15fe60e7c40975ca4bacbf8ec0f1265d197d22d610ed2645b1750649d3adfbdb24df34b2532f8ff60e629ce82e4d44408cefc2dfb9ab9d56c24800367564ddc290a2f876deffce31725c5481ddf632258473aedf834dbc0782e902638a0a2cafd0458a9baa0273a79d606db0864647b002f68136687394607749fd62931a8a1de3a22170a8ab7e6c12e9fb44dce4f37e9f259224529dd976a3e169d576dcecf3c608b118edb8c05e8b6c3a8f894906db85516496d9d81519cab8d5ec486c8f2e5851bd3e8b313b92a19f9a57038b7f0cdd4f2b35126096cbd83f3a492f2663cc94e2d27f7e0d1431dba93e94dd654d3d659db808a60435890c6cccb8ec5d882bd1255d7911b14866d18289550825e6020d691caaef42b1a8a462c8713f1330d2d5aa2e40ca36d846f8befe3b09adce6972c5c36c7a48c65638c716a7fc123efae5eb638c1b3bff1b5b03644634d31bff76f52d32271ccb5478b391e976b79948e685cdec1a8a25a22b336a99040d56a08f10b4f278c85eb75355194c00b931c28e262490592a970e55825d582161046fd63e60184b65949887997d732f165565699dcc75661b44477ef41008adeeee4a866e5061dc29a90fd762043807057e36ffbd0658c219c45383c3191796dc08265128e46c51a236b144485d6357f002e182f893071bd1a576f8c46fbcaaee246b610a5bae404709f2380270658b8fbdf6ccbd444611515a9119a69951ee97a0eb7cc648f3afdd579e7b7bc33d74089451a0ead1f40c09e8ba3eca53d7eea58338901098d2e5565e4d1d810faa129ae8cd9156ad0eaf5a5482247cf148cd57be0e0dd4478cf42e8401b1dfb8839f5eb231fdd6dcf13c9de71701374252db9c14b3c5085cddda41d0d618317d3d4700e87b80c4c2082108be6c1aef3d479944fabeb25105de3cf6805a5756b9d2bdfe239512ceb43e181a9707f5dc1b5b69623cd9d9177d4fc32223c63181579a13d99ebf8f110afa6450d1476f45138a7f4eb6812c80f36ecc567a3c9d8025ac3120faebc973988c17cf0e499b408c3a474b6ea106141ce5a4f44749576299e59997e2eb731222496600a5955e7291f9ae916a434730541e1f276b254aee92e1be7dc6f83c3904d325ea70f83d16d3c7c8f31572a1cb20e454a2d4c0f9781382fd5272171a629017dffa8739f65c15ec0f60d84e6a4a5f5312e5e361eff035dda655828f346b4d593e3d9556833b35c1a98561c09a1a80cc34ed468b79c9a981650c6ee95df4482714b387c895166d86ea15695b4043303d50e85ef73430973a5ad83fdfaa15de21193c11db5ebb9deda6d9fe998a3f01dc5be36e10ba87c5911203aa225fa60498dae8c54efa9c1b5ca8697a2ecf440383c3c207259c89911344b11145a751114d986464d0bffad9460e368fd1292a8ce3f2ab6896e319b3bc519cb1d83fd38a8201e93cc63d676a47d488e1695ac374fe73100f7df862ab99ff2dc86a004e891637e37beee8640628bec6a4172120a655755c9bb4419b792ab7cad5976a35d33bb5f918cd856835bd7122bdd3217611d05fe9ecc03c67c2a17ccd57a40cae9070a56c77fc07884223744641ff567c5ffc3695db10d14778a9ca3dd701aa6c0e8cd51ca78456cca19827e844fefaf6c62e7d7201a54aa4c17f20d3e2fbb2ed51e097a56a83732579649119e64db3f2a2d2509d3dc3bb163f3c4b580afc6f66313d7942fa6f48fcd9a02d26b6702abb84dfd9aabfde8077d9625d91e4faf2924c258b812e2215dad02b583e70c396ad304e4419bfbc2678cd974531cba1a0de69a4fd8ab35e72fe741d1f8d768aefbd224da525af6e4794027e207247717b65bed84e44577fc20bec2be8b5aef5ebf4bc566cb120186f0d113748b9b16e8ab9acbd2584a536f5ced5c076266cdcac871a7730fd42702f1f4ece55540e30e643c078d0047e4a33cd617032e6109ed560cdb0981092c1eb9a6900a13a3f7d395a4f85e6a78e1926a40e409ddfb078cdcb50632eaadda0fd694f9eeb99005e618a0ea62805acf8026091d1e0f8214d45114164c57b065a74a8031fba13a91ab8004be110e6f3c1fef1d8e8c2ad18a417f032652bbfce7339f27e3eac9b10146473e29892607354f4edfdc378c7ed253e23cf9d0dea796353ac152b03971d1ad974cf498a56f51d78c365747144cb56e1a2bac4876c9a6de5388f8720c9afd530f455fc366a73aa0a63f1abe79ba017b57fe9819b566af409531e30dcf9fa5647fd4155bad181df1349541f6ed88bdb99179c9f688e1b8850a88b265d27feacaf360a1c616cc37fd79a66225636bd69f45b423388e08277addf67609dfb5011ec5e77049314ff7a25f1c228c64652619edfafc5e1825cd0b5a0cfc50b73761bada007065d467762093227c0c1a86d21d5735a6d8f14c6e85fc4010d9e379d2efcd682e7d13d770ee2b7cc7766fb13ff9618fc8276ecf6c508769ba22699aec310267c0882d2442440da8aa527f09a0a0a2ba1600a9306bdf8b66d1e975ac29f1290046743786dec88cc11a644eae4d00c7b4720e6c819b134b800b1cd7b403bbd12df340781dce269bfd9bcaed63ada91b4d32ea7f548f321e3c54e3ccc9593a901a57503ca787fcfd97f766f4dbd9004774b866e798da857e1e19a503a7a2bb902bb9a291bec8d86c4c6aab3d3b2ee69d284b04210db0b14da1887949ea739cfb3349178e06045829a0a4f154cf03c05a9b4e4b6b42c6e8837290be178b5dd1a4b9cd54986b8519f8a6145ec784f23a2c8183703a0b6a78257017c15cfd9536595eb2a720e5ff9b6c03433f4afd6728ec9861af763fe63a84cb76db2a6794c59e69de32905061d6a16b73882d7117c8f6189abb25f73418e8f79753e274ffc9518d1ca66b68b081d89874d17b9a808b154f4cae24ad2e2948beccbbaed059dd0585c5806da8a18a20ca0c25fe620582bf0770af4d5f515d4e7fe8658beea9f4d734d668f1a4a3de11fa73d1529f1d4b6799fb35f7d2dcb2ce504820e8c689604d3c0d6dc6497066cbd5652de1c905bcd74c64306c389d2c6154be77463a9e3e3becfbb1ab5bae56e0685002235b65cb8b835cfe7e2d56999a1cbe74810a2383947fe6fb5389340b7dc5697e46d534ef4b7ea0563640f08fa2ab1be6dea24ff59ade579a4c7208e42e87a58b2d239cdafa8c8740bf4850cd81d21d22f45c1c3d006ce1a2ff6dd24556b757eb40507172b09ab7e6585d6bbbe39dcc3acf9f2bf1d9667e6f229c27c73b5503a1eab49256fef8561df2c9eebcc1f972685b4e7a5df333bc5075a58b599610353c7ceec9bb5cddad344fd9f928f3dafc75c0daa317ea8f8fadd38f936f05f8d2577f3c9f5caefd457fa95d842f34e3d3f98d8c90464bae1e22ccd69b6983d8b496df25c74124cf3a79ff615cbbe6d6f23cd1f574e6dada8cec5e3a6f3929fd2f9bdae3d3a98b6ed76b063a9dcc93454c1cdb8c8605e5d2d39996062a54318173a3505a0a7af84cd6de943e1eb219976a7d15e980d50af5113214ff296cdc0d565921fd98dd1de5d278a7fd234685b6f0ff75a0c0881e33941556b3907a7e36c371f2081c66c85ea84cf5b65655b7e7756f769e22262c8def5051ed775461f7fc83bfc1c948735cd6b86a9d145d47532650af7ffafbb5b1af7703e2655ac01528bd65c26766f654e332905bd000251ceb6fa411a468253b004d94a1b09a94776329e6d8a39920753aa59507987c669d5cb4dc7f05e0d9cb93a0e869ef6cc7b9c54f841e07a595985c32cffb0fe4285094636728f2ccc6fa4fa81290eb8d85f2fce09ed77833ee5b89da3baf87adb90252bb8a84e8baee51d7c91faa18afb71726aebbf8c7fd9fd118db6c72c8e8a479b26c69d9ca57a705ba9d1804a4da977eb54c362ba668117f258d7aa22b8ac19a749c83c02bc4ca09978dc4565413bee5c9144adb6c4c0b6b221232ad4d2a872cbb447c258ba0e6bf5a0bd629b1d42b1165bc44bb7d6d94dcd41591527d1a0f7deecb35ffb76426caf7132a638132d4ecde53843c5ae5784cf25ecf54bfe72cdd382d0971ff77c3d807d2a062a126c77cf83bb0259464f2dd2158ab006d943860a232b912ca7cffaee46d41ccded3d16a4f37697ec604e93fd9967ad716a1564a12209dfe7bfad951f8c1d85b4495f46d8d114220e45faa743e8f721bc9ef588278bdcb31ff52b37df95d59df0e9d968b69c1f829d197b823d17126a3d95d939b10b42b4c3f13abae03d5b1f7ec4cc169008182211aff16e17fb9fe74c08ba199bb8741ab027142ae5b73b7d9eb4587e1365f806779b733a174adb86212f758fb0294a0d0d1522eeef4c8186d017ebc0ac00bae769083fdbd8dee49e4ebdb6b859e8ba5c5808862b61ef914cabf492765c710c8cedcc559f9439f105dba06e9d5dc43f444b469191c5249026fdf2e2de05f2a2515e8c7d67c24fd88f6c8691e3cec7ec9e24bc0e2e22d83361264cf9c24e461f4825b4dc9c6575efa661a262707caeeb7546a7bb688b6dd78d021e6c68ef777e30565625fcc84892db86b69a2efdd3122f699098aaab1d33122b66e56cbac6f966ecb1fd7fe239e64f25b752ae3303630fe1abb534bd4b9eb1600a10768ea94c222f1d4bbf7e0d3c0b1ec04ad55dc77aa84fde1e96689924ae9f2567eae8a4a6eb9def0dccc7897234f879447daacb0e4792258090b7a8457d111da1e8fa9be8d68ce713337ca514ad145a5f86e6729d578de3799a85aa5f2eecf735a10d1c4a74c3da1f79833999b305580d39c025ae0f483a6cee17707f5746168fca2fa271f6090cfc44b2e94f65f9a664ad934cb4fa0b6cf8720780b274adae38a73e9212a474fd09db6f7ced5b32c643d7af02a61abe68218c0e971c27b98ff03055b5f1b0249e2b8b8d7763238c74eb3feabf0f9e28d294a679f34fbceef22e6ab1b8d56b75b8be6ac035cd39eb6eecf08fe657260ebcabebc5b756b43d63cef7a2aa9a50702f3fb3cd25f90f1c766eb298978934e2dcb26a4b9c92f1547d0723a771ea89ed4a86627e5fbbe14c94ad8e76c458c5e1c927ed619d27631dd2e1fa1ac94dac600da8bda8ca128212ea5652f33c50acc8c6a2f371d7c49272e170f08fff95af067f5191952591ac36a711d05a"}, 0x1058) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="a3aba95769b3240fa411d47f08c8549c11052f12b2f73aa8edaec578202c4f1b557e58d5e3c538bce67950f12d63ef32b6d15fdf489421c7144fe34809cb10ba1321fb0b0c1eec0ca131fc8305fb5678b53d9dbaa543c9ae6971eaac734351299e0069ad604f8b13bcab7ab9f9dc3d81e7202e519dc87c37926f627393bfeb25a032e12e08fde4ed9c6be5997c87c0e6170181cfcc4bab161e74c120c1c04dac69dec5ad14b917102860634bdaf2cab51dc812c35cf28897018ab7d54423a2d061deba4c47660c17172606026f7d1b46c7df5d4afeb69dd6c7ae18807403132c805f26784e8c5d", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x16, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000fff000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x76, 0x8, 0x5, {0x400, 0x496b}, 0xffff, 0xfff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14ddba5edfb877e7628295166b0a2e6fea62ffd4d54a4a20b0512331265ac38caa71f0b7abf35157b7b6dd77aac0ddbaacac93386ab21d09fed5d2bc8895209b9321bd2b85daad88c2c7b2d0186bd771d206305210f9b4a326b4fb061f79516cfb3b9ad65f928b726607b1aabc563dc0129c48fb1fb4b548a5be1ed20b3f26b1f87db55263e62b84bc4603ae1788a4401ea1b96dd4", @ANYRES16=r1, @ANYBLOB="010026bd70000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r6, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xf1e, 0x1, 0x8, 0x1f, 0x7, 0x0, 0xc4, {r6, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}, 0x3}}, 0x1f, 0x800, 0x1ff, 0x5, 0x3}}, &(0x7f00000002c0)=0xb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000300)={r4, 0x217, 0x8, 0xffffffff}) open(&(0x7f0000000200)='./file0\x00', 0x20000, 0xa2) r9 = openat$cgroup_ro(r2, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f00000004c0)={@null=' \x00', 0xc, 'ip6_vti0\x00'}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000340)=0x8000) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000080), 0x4) 16:11:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x18, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000a2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fbff000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x208, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x47149360}, {0x6, 0x16, 0xe4}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x55}, {0x6, 0x16, 0x7f}, {0x5}}]}, 0x208}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r5 = dup(r2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xc}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80004) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4040010) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x19, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000526282fa000000000000000000000000d976e17eb8817ee519555d0c00000000"], 0x20}}, 0x0) [ 530.843423] sd 0:0:1:0: [sg0] tag#4132 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 530.852300] sd 0:0:1:0: [sg0] tag#4132 CDB: Variable length, sa=0x0 [ 530.860281] sd 0:0:1:0: [sg0] tag#4132 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 530.869502] sd 0:0:1:0: [sg0] tag#4132 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 530.878442] sd 0:0:1:0: [sg0] tag#4132 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 530.887376] sd 0:0:1:0: [sg0] tag#4132 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 530.896266] sd 0:0:1:0: [sg0] tag#4132 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 530.905200] sd 0:0:1:0: [sg0] tag#4132 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 530.914143] sd 0:0:1:0: [sg0] tag#4132 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 530.923091] sd 0:0:1:0: [sg0] tag#4132 CDB[70]: 00 00 20 00 00 00 00 16:11:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8e5}, 0x20040004) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x1a, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 530.964670] sd 0:0:1:0: [sg0] tag#4136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 530.973548] sd 0:0:1:0: [sg0] tag#4136 CDB: Variable length, sa=0x0 [ 530.980163] sd 0:0:1:0: [sg0] tag#4136 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 530.989342] sd 0:0:1:0: [sg0] tag#4136 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 530.998282] sd 0:0:1:0: [sg0] tag#4136 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000fcff000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x1c, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 531.007198] sd 0:0:1:0: [sg0] tag#4136 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 531.016083] sd 0:0:1:0: [sg0] tag#4136 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 531.025037] sd 0:0:1:0: [sg0] tag#4136 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 531.033975] sd 0:0:1:0: [sg0] tag#4136 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 531.042944] sd 0:0:1:0: [sg0] tag#4136 CDB[70]: 00 00 20 00 00 00 00 16:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x3}]}, 0x20}}, 0x48801) 16:11:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x34}}, 0x0) 16:11:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000b2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001002000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x1d, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000001c0)={0x2, 0x5, 0x1ff, 0x80000001}) 16:11:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x50040, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc00c1d6669f45572}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x64}}, 0x8010) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010000000000060014000000000006000200fb770000a9e7bc3e635ddf989cd8bbb60ad374cf49dc59c0f5fae9741fa845d92cbfd3098782f61570218499383b095c919474d05b535331ecf97d6b75b74037c4641770442e3178633b4b045accafb52422a081693405f6d1a848dbde61239c604ddf7126be68bb925d6eaaf875978057b5b0bc4f1c0a6fe62d374a1e636f9ef43059d0a8d6cca40499c4faf214dc7e6cab7429070ec462cb17d4b7fd113a6691c505affdaae3a0926bf19645b38b211f996346bac357f3fcc3993ae4dda49c"], 0x30}}, 0x4048004) 16:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) [ 531.364273] sd 0:0:1:0: [sg0] tag#4197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 531.373180] sd 0:0:1:0: [sg0] tag#4197 CDB: Variable length, sa=0x0 [ 531.379885] sd 0:0:1:0: [sg0] tag#4197 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 531.388849] sd 0:0:1:0: [sg0] tag#4197 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 531.397797] sd 0:0:1:0: [sg0] tag#4197 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 531.406712] sd 0:0:1:0: [sg0] tag#4197 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 531.415672] sd 0:0:1:0: [sg0] tag#4197 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 531.424721] sd 0:0:1:0: [sg0] tag#4197 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 531.433659] sd 0:0:1:0: [sg0] tag#4197 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 531.442619] sd 0:0:1:0: [sg0] tag#4197 CDB[70]: 00 00 20 00 00 00 00 16:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001003000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x1e, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 531.619688] sd 0:0:1:0: [sg0] tag#4198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 531.628710] sd 0:0:1:0: [sg0] tag#4198 CDB: Variable length, sa=0x0 [ 531.635287] sd 0:0:1:0: [sg0] tag#4198 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 531.644234] sd 0:0:1:0: [sg0] tag#4198 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 531.653278] sd 0:0:1:0: [sg0] tag#4198 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000d2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001004000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 531.662220] sd 0:0:1:0: [sg0] tag#4198 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 531.671191] sd 0:0:1:0: [sg0] tag#4198 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 531.680157] sd 0:0:1:0: [sg0] tag#4198 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 531.689238] sd 0:0:1:0: [sg0] tag#4198 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 531.698197] sd 0:0:1:0: [sg0] tag#4198 CDB[70]: 00 00 20 00 00 00 00 16:11:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x21, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000102000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x22, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001005000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000242000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000252000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001006000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x67, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000482000000000000040000000000008000000", 0x200000bf}], 0x2) [ 532.164436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=3362 comm=syz-executor.1 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001007000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0xec0, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 532.248743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=3362 comm=syz-executor.1 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060004c2000000000000040000000000008000000", 0x200000bf}], 0x2) [ 532.390225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3776 sclass=netlink_route_socket pid=3378 comm=syz-executor.1 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000602000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001009000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000682000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100b000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0xc0) ioctl$SIOCNRDECOBS(r3, 0x89e2) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060006c2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e20, 0x1, @local, 0x1540}, {0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x40}, 0x7f, [0x80000000, 0xffff, 0x7fffffff, 0x6, 0x1, 0xffffff81, 0x8, 0x3f]}, 0x5c) r4 = dup(r0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000240)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa3fb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000000b007369700000000b0073697000f3fe020000000000a29214bf7cd5de37aa0d62ee5c2c5b00000000"], 0x30}}, 0x8050) 16:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000702000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100c000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000742000000000000040000000000008000000", 0x200000bf}], 0x2) [ 532.916821] nla_parse: 12 callbacks suppressed [ 532.916831] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 16:11:09 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x54, 0x2, 0x800, {0x0, 0x4}, {0x3, 0xfff}, @const={0xfffd, {0x6, 0x5, 0x4, 0x6}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x57, @broadcast, 0x4e22, 0x0, 'lblcr\x00', 0x9, 0x200, 0x30}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x101, 0x7fffffff, 0x8b}}, 0x44) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="308b6b5536744085c0a6000000", @ANYRES16=r3, @ANYBLOB="01990000000000000000010000001c000180060001000000000006020400000000000600020000000000cd3a6b5ad9edde07a8625822b42644d45b52220f12e9e62becb127841b677727d81e4c9906342b9ac5f710ec29778e0226c97f06e791d446b0baef29effa4e128dadfb13e67d6cb8fc0962a4a46a86d61922c3facc918baa"], 0x30}}, 0x0) 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001010000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001022000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200003, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000811}, 0x4048000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060007a2000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001023000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x5, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 533.517035] scsi_io_completion_action: 12 callbacks suppressed [ 533.517084] sd 0:0:1:0: [sg0] tag#4200 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 533.531998] sd 0:0:1:0: [sg0] tag#4200 CDB: Variable length, sa=0x0 [ 533.538565] sd 0:0:1:0: [sg0] tag#4200 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 533.547519] sd 0:0:1:0: [sg0] tag#4200 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 533.556409] sd 0:0:1:0: [sg0] tag#4200 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:09 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = signalfd4(r2, &(0x7f0000000080)={[0x9]}, 0x8, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3bfb}, 0x8) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7fff, 0x7, 0x9, 0x3, 0x31c4d409, 0x6, 0x2e42}, 0x1c) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) [ 533.565405] sd 0:0:1:0: [sg0] tag#4200 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 533.574367] sd 0:0:1:0: [sg0] tag#4200 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 533.583310] sd 0:0:1:0: [sg0] tag#4200 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 533.592251] sd 0:0:1:0: [sg0] tag#4200 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 533.601181] sd 0:0:1:0: [sg0] tag#4200 CDB[70]: 00 00 20 00 00 00 00 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x6, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000102c000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:09 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}, [0x1, 0x10001, 0x7, 0x8, 0xfffffffffffffffe, 0xf, 0x0, 0x3, 0x5, 0x3, 0xa1, 0x3, 0xfffffffffffffe00, 0xfffffffffffffff9, 0x7]}, &(0x7f0000000080)=0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x8, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001060000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x0, 0x8001, 0x80, 0x80000000, 0x5, 0x20, 0x0, 0x8}}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000004135d05ba5c89c0000010000001c000180060001000000000006000400681a000006"], 0x30}}, 0x0) [ 533.949186] sd 0:0:1:0: [sg0] tag#4136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 533.958120] sd 0:0:1:0: [sg0] tag#4136 CDB: Variable length, sa=0x0 [ 533.964618] sd 0:0:1:0: [sg0] tag#4136 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 533.973559] sd 0:0:1:0: [sg0] tag#4136 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 533.982502] sd 0:0:1:0: [sg0] tag#4136 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x9, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 533.991441] sd 0:0:1:0: [sg0] tag#4136 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 534.000397] sd 0:0:1:0: [sg0] tag#4136 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 534.009333] sd 0:0:1:0: [sg0] tag#4136 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 534.018310] sd 0:0:1:0: [sg0] tag#4136 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 534.027233] sd 0:0:1:0: [sg0] tag#4136 CDB[70]: 00 00 20 00 00 00 00 16:11:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010f0000c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xa, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:10 executing program 5: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0xbc, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) 16:11:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002400000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xb, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 534.313017] sd 0:0:1:0: [sg0] tag#4201 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 534.322156] sd 0:0:1:0: [sg0] tag#4201 CDB: Variable length, sa=0x0 [ 534.328676] sd 0:0:1:0: [sg0] tag#4201 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 534.337696] sd 0:0:1:0: [sg0] tag#4201 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 534.346619] sd 0:0:1:0: [sg0] tag#4201 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0xffffff1a}}, 0x0) 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 534.355513] sd 0:0:1:0: [sg0] tag#4201 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 534.364468] sd 0:0:1:0: [sg0] tag#4201 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 534.373408] sd 0:0:1:0: [sg0] tag#4201 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 534.382339] sd 0:0:1:0: [sg0] tag#4201 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 534.391268] sd 0:0:1:0: [sg0] tag#4201 CDB[70]: 00 00 20 00 00 00 00 16:11:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002500000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000030c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000000)=0x80) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="dbe44d0a", @ANYRESOCT=r2, @ANYRESDEC], 0x30}}, 0x0) [ 534.547137] sd 0:0:1:0: [sg0] tag#4136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 534.555922] sd 0:0:1:0: [sg0] tag#4136 CDB: Variable length, sa=0x0 [ 534.562652] sd 0:0:1:0: [sg0] tag#4136 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 534.571608] sd 0:0:1:0: [sg0] tag#4136 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 534.580574] sd 0:0:1:0: [sg0] tag#4136 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xe, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 534.589552] sd 0:0:1:0: [sg0] tag#4136 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 534.598488] sd 0:0:1:0: [sg0] tag#4136 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 534.607438] sd 0:0:1:0: [sg0] tag#4136 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 534.616326] sd 0:0:1:0: [sg0] tag#4136 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 534.625269] sd 0:0:1:0: [sg0] tag#4136 CDB[70]: 00 00 20 00 00 00 00 16:11:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xa0, r1, 0x710, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000094}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f00000004c0)=@null) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000480)={0x0, 0x1, 0x6, @random="73d5ab0331e5"}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0900009e", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x345000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r8, @ANYRES64=r6, @ANYBLOB="010000000000000000001900000005001c00000000a40500a3000000000008000300fe44a52ea7608d702460dfad5ef4ee49f74215f8d9e7800f19523ad8ea338a2fbf1d334798a500b337b38aeac6fb037f5f4df8786c5c9482f0c6c6b7ec380d966f", @ANYRES32=r9, @ANYRESHEX=0x0], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b81e0cfa893350501754af1b2eb006fcd530935fc185b758aa1d753f8ba8374ebcd93adf43ca8c96871f741b0982b2182941b7e2d56f10ae43f82dfd8081c9c68d5039420e288ec0261ffa5932", @ANYRES16=r10, @ANYBLOB="000228bd7000fcdbdf2511000000080001000100000008001400", @ANYRES32=0x0, @ANYBLOB="0500130100000000060012000100000005001900000000000500130102000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 16:11:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000050c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002f00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 534.824424] sd 0:0:1:0: [sg0] tag#4202 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 534.833610] sd 0:0:1:0: [sg0] tag#4202 CDB: Variable length, sa=0x0 [ 534.840146] sd 0:0:1:0: [sg0] tag#4202 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 534.849083] sd 0:0:1:0: [sg0] tag#4202 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 534.858038] sd 0:0:1:0: [sg0] tag#4202 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x10, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 534.866966] sd 0:0:1:0: [sg0] tag#4202 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 534.876058] sd 0:0:1:0: [sg0] tag#4202 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 534.884980] sd 0:0:1:0: [sg0] tag#4202 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 534.893921] sd 0:0:1:0: [sg0] tag#4202 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 534.902837] sd 0:0:1:0: [sg0] tag#4202 CDB[70]: 00 00 20 00 00 00 00 16:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000060c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000404}, 0x4) setrlimit(0xe, &(0x7f0000000000)={0x7fff, 0xe9}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='0H \x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000000000006000400000000000600020000000000"], 0x30}}, 0x0) 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x24, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000070c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010000000000060004000000000006000200f9ffffff"], 0x30}}, 0x0) 16:11:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000004700000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x60, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000090c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600b882000000000000040000000000008000000", 0x200000bf}], 0x2) [ 535.317429] sd 0:0:1:0: [sg0] tag#4203 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 535.326240] sd 0:0:1:0: [sg0] tag#4203 CDB: Variable length, sa=0x0 [ 535.333749] sd 0:0:1:0: [sg0] tag#4203 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 535.342688] sd 0:0:1:0: [sg0] tag#4203 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 535.351631] sd 0:0:1:0: [sg0] tag#4203 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 535.360637] sd 0:0:1:0: [sg0] tag#4203 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 535.369761] sd 0:0:1:0: [sg0] tag#4203 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 535.378736] sd 0:0:1:0: [sg0] tag#4203 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 535.387665] sd 0:0:1:0: [sg0] tag#4203 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 535.396596] sd 0:0:1:0: [sg0] tag#4203 CDB[70]: 00 00 20 00 00 00 00 [ 535.410089] sd 0:0:1:0: [sg0] tag#4137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 535.419123] sd 0:0:1:0: [sg0] tag#4137 CDB: Variable length, sa=0x0 [ 535.425582] sd 0:0:1:0: [sg0] tag#4137 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 535.434520] sd 0:0:1:0: [sg0] tag#4137 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 535.443449] sd 0:0:1:0: [sg0] tag#4137 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 535.452397] sd 0:0:1:0: [sg0] tag#4137 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 535.461340] sd 0:0:1:0: [sg0] tag#4137 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 535.471846] sd 0:0:1:0: [sg0] tag#4137 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 535.481118] sd 0:0:1:0: [sg0] tag#4137 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 535.490054] sd 0:0:1:0: [sg0] tag#4137 CDB[70]: 00 00 20 00 00 00 00 16:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000b0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x300, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006000000000000040000000000008000000", 0x200000bf}], 0x2) [ 535.726506] sd 0:0:1:0: [sg0] tag#4204 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 535.735479] sd 0:0:1:0: [sg0] tag#4204 CDB: Variable length, sa=0x0 [ 535.742021] sd 0:0:1:0: [sg0] tag#4204 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 535.750981] sd 0:0:1:0: [sg0] tag#4204 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 535.759952] sd 0:0:1:0: [sg0] tag#4204 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000c0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 535.768892] sd 0:0:1:0: [sg0] tag#4204 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 535.777867] sd 0:0:1:0: [sg0] tag#4204 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 535.786826] sd 0:0:1:0: [sg0] tag#4204 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 535.795719] sd 0:0:1:0: [sg0] tag#4204 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 535.804668] sd 0:0:1:0: [sg0] tag#4204 CDB[70]: 00 00 20 00 00 00 00 16:11:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x500, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010001f0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006100000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x600, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 536.074199] sd 0:0:1:0: [sg0] tag#4205 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 536.083171] sd 0:0:1:0: [sg0] tag#4205 CDB: Variable length, sa=0x0 [ 536.089693] sd 0:0:1:0: [sg0] tag#4205 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 536.098673] sd 0:0:1:0: [sg0] tag#4205 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 536.107620] sd 0:0:1:0: [sg0] tag#4205 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x900, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000200c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 536.116591] sd 0:0:1:0: [sg0] tag#4205 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 536.125495] sd 0:0:1:0: [sg0] tag#4205 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 536.134413] sd 0:0:1:0: [sg0] tag#4205 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 536.143337] sd 0:0:1:0: [sg0] tag#4205 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 536.152269] sd 0:0:1:0: [sg0] tag#4205 CDB[70]: 00 00 20 00 00 00 00 16:11:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:12 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xa00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 536.304390] sd 0:0:1:0: [sg0] tag#4206 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 536.313430] sd 0:0:1:0: [sg0] tag#4206 CDB: Variable length, sa=0x0 [ 536.319958] sd 0:0:1:0: [sg0] tag#4206 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 536.328897] sd 0:0:1:0: [sg0] tag#4206 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 536.337845] sd 0:0:1:0: [sg0] tag#4206 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 536.346781] sd 0:0:1:0: [sg0] tag#4206 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 536.355696] sd 0:0:1:0: [sg0] tag#4206 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 536.364633] sd 0:0:1:0: [sg0] tag#4206 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 536.373559] sd 0:0:1:0: [sg0] tag#4206 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 536.382483] sd 0:0:1:0: [sg0] tag#4206 CDB[70]: 00 00 20 00 00 00 00 16:11:12 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000220c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xb00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000230c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006800000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xba4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000007700000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:12 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xc00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010002c0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000080ffff0000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xe00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010003f0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000500000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000400c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000700000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x2400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000900000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000600c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x3f00, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000a00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x5865, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010fff00c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x3b9ac9ff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x6000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:13 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002400000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100fff0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x6558, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002500000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0xffc99a3b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x8100, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002f00000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010f0ff0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xa40b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:14 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000004700000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000020c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:14 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006000000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000030c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x34000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006100000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:14 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 538.625168] scsi_io_completion_action: 14 callbacks suppressed [ 538.625211] sd 0:0:1:0: [sg0] tag#4138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 538.641761] sd 0:0:1:0: [sg0] tag#4138 CDB: Variable length, sa=0x0 [ 538.648615] sd 0:0:1:0: [sg0] tag#4138 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 538.657554] sd 0:0:1:0: [sg0] tag#4138 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 538.666477] sd 0:0:1:0: [sg0] tag#4138 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 538.675383] sd 0:0:1:0: [sg0] tag#4138 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 538.684311] sd 0:0:1:0: [sg0] tag#4138 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 538.693226] sd 0:0:1:0: [sg0] tag#4138 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 538.702173] sd 0:0:1:0: [sg0] tag#4138 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 538.711089] sd 0:0:1:0: [sg0] tag#4138 CDB[70]: 00 00 20 00 00 00 00 16:11:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000040c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x400300, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 538.729380] sd 0:0:1:0: [sg0] tag#4139 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 538.738202] sd 0:0:1:0: [sg0] tag#4139 CDB: Variable length, sa=0x0 [ 538.746024] sd 0:0:1:0: [sg0] tag#4139 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 538.754912] sd 0:0:1:0: [sg0] tag#4139 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 538.764097] sd 0:0:1:0: [sg0] tag#4139 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:14 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 538.773021] sd 0:0:1:0: [sg0] tag#4139 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 538.781937] sd 0:0:1:0: [sg0] tag#4139 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 538.790863] sd 0:0:1:0: [sg0] tag#4139 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 538.799803] sd 0:0:1:0: [sg0] tag#4139 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 538.808720] sd 0:0:1:0: [sg0] tag#4139 CDB[70]: 00 00 20 00 00 00 00 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000050c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:15 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000060c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006300000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:15 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 539.219212] sd 0:0:1:0: [sg0] tag#4140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 539.228267] sd 0:0:1:0: [sg0] tag#4140 CDB: Variable length, sa=0x0 [ 539.234723] sd 0:0:1:0: [sg0] tag#4140 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 539.243680] sd 0:0:1:0: [sg0] tag#4140 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 539.252613] sd 0:0:1:0: [sg0] tag#4140 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 539.263115] sd 0:0:1:0: [sg0] tag#4140 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 539.272461] sd 0:0:1:0: [sg0] tag#4140 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 539.281400] sd 0:0:1:0: [sg0] tag#4140 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 539.290339] sd 0:0:1:0: [sg0] tag#4140 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 539.299316] sd 0:0:1:0: [sg0] tag#4140 CDB[70]: 00 00 20 00 00 00 00 16:11:15 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x3000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000006800000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000070c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 539.491201] sd 0:0:1:0: [sg0] tag#4207 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 539.500250] sd 0:0:1:0: [sg0] tag#4207 CDB: Variable length, sa=0x0 [ 539.506803] sd 0:0:1:0: [sg0] tag#4207 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 539.515687] sd 0:0:1:0: [sg0] tag#4207 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 539.524631] sd 0:0:1:0: [sg0] tag#4207 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 539.533579] sd 0:0:1:0: [sg0] tag#4207 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 539.542667] sd 0:0:1:0: [sg0] tag#4207 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 539.551693] sd 0:0:1:0: [sg0] tag#4207 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 539.560713] sd 0:0:1:0: [sg0] tag#4207 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 539.569667] sd 0:0:1:0: [sg0] tag#4207 CDB[70]: 00 00 20 00 00 00 00 [ 539.589399] sd 0:0:1:0: [sg0] tag#4141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 539.598456] sd 0:0:1:0: [sg0] tag#4141 CDB: Variable length, sa=0x0 [ 539.604948] sd 0:0:1:0: [sg0] tag#4141 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 539.613956] sd 0:0:1:0: [sg0] tag#4141 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 539.622894] sd 0:0:1:0: [sg0] tag#4141 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 539.631846] sd 0:0:1:0: [sg0] tag#4141 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000090c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:15 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0xffc99a3b00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000007700000000000040000000000008000000", 0x200000bf}], 0x2) [ 539.640782] sd 0:0:1:0: [sg0] tag#4141 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 539.649746] sd 0:0:1:0: [sg0] tag#4141 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 539.658677] sd 0:0:1:0: [sg0] tag#4141 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 539.668894] sd 0:0:1:0: [sg0] tag#4141 CDB[70]: 00 00 20 00 00 00 00 16:11:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x5000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 539.832686] sd 0:0:1:0: [sg0] tag#4208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 539.841777] sd 0:0:1:0: [sg0] tag#4208 CDB: Variable length, sa=0x0 [ 539.848304] sd 0:0:1:0: [sg0] tag#4208 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 539.857235] sd 0:0:1:0: [sg0] tag#4208 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 539.866157] sd 0:0:1:0: [sg0] tag#4208 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 539.875056] sd 0:0:1:0: [sg0] tag#4208 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 539.883980] sd 0:0:1:0: [sg0] tag#4208 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 539.892902] sd 0:0:1:0: [sg0] tag#4208 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 539.901820] sd 0:0:1:0: [sg0] tag#4208 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 539.910771] sd 0:0:1:0: [sg0] tag#4208 CDB[70]: 00 00 20 00 00 00 00 16:11:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000b0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x6000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000c0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000003000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x9000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 540.308869] sd 0:0:1:0: [sg0] tag#4209 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 540.317993] sd 0:0:1:0: [sg0] tag#4209 CDB: Variable length, sa=0x0 [ 540.324465] sd 0:0:1:0: [sg0] tag#4209 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 540.333420] sd 0:0:1:0: [sg0] tag#4209 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 540.342358] sd 0:0:1:0: [sg0] tag#4209 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000100c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 540.351290] sd 0:0:1:0: [sg0] tag#4209 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 540.360221] sd 0:0:1:0: [sg0] tag#4209 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 540.369146] sd 0:0:1:0: [sg0] tag#4209 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 540.378077] sd 0:0:1:0: [sg0] tag#4209 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 540.387020] sd 0:0:1:0: [sg0] tag#4209 CDB[70]: 00 00 20 00 00 00 00 16:11:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000220c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xa000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000230c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000e0f000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:16 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xb000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 540.737258] sd 0:0:1:0: [sg0] tag#4142 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 540.746282] sd 0:0:1:0: [sg0] tag#4142 CDB: Variable length, sa=0x0 [ 540.752747] sd 0:0:1:0: [sg0] tag#4142 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 540.761700] sd 0:0:1:0: [sg0] tag#4142 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 540.770629] sd 0:0:1:0: [sg0] tag#4142 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 540.779558] sd 0:0:1:0: [sg0] tag#4142 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 540.788498] sd 0:0:1:0: [sg0] tag#4142 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 540.799048] sd 0:0:1:0: [sg0] tag#4142 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 540.808372] sd 0:0:1:0: [sg0] tag#4142 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 540.817301] sd 0:0:1:0: [sg0] tag#4142 CDB[70]: 00 00 20 00 00 00 00 16:11:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010002c0c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:17 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xc000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000600c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:17 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xe000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000000e10000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000f00c", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 541.255843] sd 0:0:1:0: [sg0] tag#4143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 541.264640] sd 0:0:1:0: [sg0] tag#4143 CDB: Variable length, sa=0x0 [ 541.271184] sd 0:0:1:0: [sg0] tag#4143 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 541.280143] sd 0:0:1:0: [sg0] tag#4143 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 541.289094] sd 0:0:1:0: [sg0] tag#4143 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:17 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000002000000040000000000008000000", 0x200000bf}], 0x2) [ 541.298157] sd 0:0:1:0: [sg0] tag#4143 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 541.308383] sd 0:0:1:0: [sg0] tag#4143 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 541.317568] sd 0:0:1:0: [sg0] tag#4143 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 541.326485] sd 0:0:1:0: [sg0] tag#4143 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 541.335368] sd 0:0:1:0: [sg0] tag#4143 CDB[70]: 00 00 20 00 00 00 00 16:11:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000d", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 541.466430] sd 0:0:1:0: [sg0] tag#4144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 541.475200] sd 0:0:1:0: [sg0] tag#4144 CDB: Variable length, sa=0x0 [ 541.481769] sd 0:0:1:0: [sg0] tag#4144 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 541.491007] sd 0:0:1:0: [sg0] tag#4144 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 541.499980] sd 0:0:1:0: [sg0] tag#4144 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 541.510266] sd 0:0:1:0: [sg0] tag#4144 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 541.519516] sd 0:0:1:0: [sg0] tag#4144 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 541.528451] sd 0:0:1:0: [sg0] tag#4144 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 541.537376] sd 0:0:1:0: [sg0] tag#4144 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 541.546437] sd 0:0:1:0: [sg0] tag#4144 CDB[70]: 00 00 20 00 00 00 00 [ 541.615784] ================================================================================ [ 541.624714] UBSAN: Undefined behaviour in fs/jfs/jfs_imap.c:458:7 [ 541.630953] shift exponent -1 is negative [ 541.635108] CPU: 0 PID: 4122 Comm: syz-executor.3 Not tainted 4.19.147-syzkaller #0 [ 541.642897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.652248] Call Trace: [ 541.654847] dump_stack+0x22c/0x33e [ 541.658487] ubsan_epilogue+0xe/0x3a [ 541.662211] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 541.668370] ? do_raw_spin_unlock+0x171/0x240 [ 541.672878] diReadSpecial.cold+0x1b/0x3e [ 541.677042] jfs_mount+0x83/0x3d0 [ 541.680504] jfs_fill_super+0x55c/0xb50 [ 541.684487] ? parse_options+0xf50/0xf50 [ 541.688564] ? set_blocksize+0x163/0x3f0 [ 541.692643] mount_bdev+0x2fc/0x3b0 [ 541.696282] ? parse_options+0xf50/0xf50 [ 541.700359] mount_fs+0xa3/0x318 [ 541.703741] vfs_kern_mount.part.0+0x68/0x470 [ 541.708285] do_mount+0x51c/0x2f10 [ 541.711840] ? do_raw_spin_unlock+0x171/0x240 [ 541.716345] ? check_preemption_disabled+0x41/0x2b0 [ 541.721456] ? copy_mount_string+0x40/0x40 [ 541.725702] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 541.730557] ? copy_mount_options+0x261/0x370 [ 541.735065] ksys_mount+0xcf/0x130 [ 541.738618] __x64_sys_mount+0xba/0x150 [ 541.742604] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 541.747198] do_syscall_64+0xf9/0x670 [ 541.751018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 541.756213] RIP: 0033:0x460bca 16:11:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:17 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 541.759412] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 541.778319] RSP: 002b:00007fc955bb3a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 541.786045] RAX: ffffffffffffffda RBX: 00007fc955bb3b20 RCX: 0000000000460bca [ 541.793326] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fc955bb3ae0 [ 541.800604] RBP: 00007fc955bb3ae0 R08: 00007fc955bb3b20 R09: 0000000020000000 [ 541.807881] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 16:11:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002002000000000040000000000008000000", 0x200000bf}], 0x2) [ 541.815157] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 541.822444] ================================================================================ 16:11:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x24000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002003000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000014", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002004000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:18 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffc99a3b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002005000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000017", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x60000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002006000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002007000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000001f", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x65580000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002008000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:18 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000003f", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x81000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002009000000000040000000000008000000", 0x200000bf}], 0x2) [ 542.737301] ================================================================================ [ 542.745941] UBSAN: Undefined behaviour in fs/jfs/jfs_mount.c:385:25 [ 542.753491] shift exponent 63 is too large for 32-bit type 'int' [ 542.759654] CPU: 0 PID: 4204 Comm: syz-executor.3 Not tainted 4.19.147-syzkaller #0 [ 542.767452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.776808] Call Trace: [ 542.779419] dump_stack+0x22c/0x33e [ 542.783058] ubsan_epilogue+0xe/0x3a [ 542.786790] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 542.792951] ? __bread_gfp+0x81/0x300 [ 542.796769] ? readSuper+0xf2/0x290 [ 542.800412] chkSuper.cold+0x1e/0x98 [ 542.804138] ? readSuper+0x290/0x290 [ 542.807864] ? do_raw_spin_lock+0xcb/0x220 [ 542.812112] jfs_mount+0x47/0x3d0 [ 542.815581] jfs_fill_super+0x55c/0xb50 [ 542.819565] ? parse_options+0xf50/0xf50 [ 542.823637] ? set_blocksize+0x163/0x3f0 [ 542.827715] mount_bdev+0x2fc/0x3b0 [ 542.831353] ? parse_options+0xf50/0xf50 [ 542.835428] mount_fs+0xa3/0x318 [ 542.838811] vfs_kern_mount.part.0+0x68/0x470 [ 542.843316] do_mount+0x51c/0x2f10 [ 542.846869] ? check_preemption_disabled+0x41/0x2b0 [ 542.851892] ? copy_mount_string+0x40/0x40 [ 542.856144] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 542.860995] ? _copy_from_user+0xd2/0x130 [ 542.865151] ? copy_mount_options+0x261/0x370 [ 542.869656] ksys_mount+0xcf/0x130 [ 542.873209] __x64_sys_mount+0xba/0x150 [ 542.877194] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 542.881784] do_syscall_64+0xf9/0x670 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000200a000000000040000000000008000000", 0x200000bf}], 0x2) [ 542.885600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.890794] RIP: 0033:0x460bca [ 542.893990] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 542.912892] RSP: 002b:00007fc955bb3a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 542.920607] RAX: ffffffffffffffda RBX: 00007fc955bb3b20 RCX: 0000000000460bca [ 542.927885] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fc955bb3ae0 16:11:19 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000200b000000000040000000000008000000", 0x200000bf}], 0x2) [ 542.935159] RBP: 00007fc955bb3ae0 R08: 00007fc955bb3b20 R09: 0000000020000000 [ 542.942430] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 542.949705] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 542.956997] ================================================================================ 16:11:19 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000200c000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:19 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000200d000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000005f", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:19 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xa40b0000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002010000000000040000000000008000000", 0x200000bf}], 0x2) [ 543.664582] scsi_io_completion_action: 13 callbacks suppressed [ 543.664627] sd 0:0:1:0: [sg0] tag#4145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 543.679926] sd 0:0:1:0: [sg0] tag#4145 CDB: Variable length, sa=0x0 [ 543.686440] sd 0:0:1:0: [sg0] tag#4145 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 543.695339] sd 0:0:1:0: [sg0] tag#4145 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 543.704274] sd 0:0:1:0: [sg0] tag#4145 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:19 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000fb", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 543.713242] sd 0:0:1:0: [sg0] tag#4145 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 543.722181] sd 0:0:1:0: [sg0] tag#4145 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 543.731139] sd 0:0:1:0: [sg0] tag#4145 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 543.740089] sd 0:0:1:0: [sg0] tag#4145 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 543.749023] sd 0:0:1:0: [sg0] tag#4145 CDB[70]: 00 00 20 00 00 00 00 16:11:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002024000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xf1ffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 543.990041] sd 0:0:1:0: [sg0] tag#4210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 543.999878] sd 0:0:1:0: [sg0] tag#4210 CDB: Variable length, sa=0x0 [ 544.006416] sd 0:0:1:0: [sg0] tag#4210 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 544.015338] sd 0:0:1:0: [sg0] tag#4210 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 544.024219] sd 0:0:1:0: [sg0] tag#4210 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:20 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000d", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 544.033148] sd 0:0:1:0: [sg0] tag#4210 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 544.042074] sd 0:0:1:0: [sg0] tag#4210 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 544.050990] sd 0:0:1:0: [sg0] tag#4210 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 544.059900] sd 0:0:1:0: [sg0] tag#4210 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 544.068815] sd 0:0:1:0: [sg0] tag#4210 CDB[70]: 00 00 20 00 00 00 00 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002025000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000010", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:20 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 544.334744] sd 0:0:1:0: [sg0] tag#4211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 544.343702] sd 0:0:1:0: [sg0] tag#4211 CDB: Variable length, sa=0x0 [ 544.350244] sd 0:0:1:0: [sg0] tag#4211 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 544.359175] sd 0:0:1:0: [sg0] tag#4211 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 544.368107] sd 0:0:1:0: [sg0] tag#4211 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:20 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 544.377178] sd 0:0:1:0: [sg0] tag#4211 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 544.386110] sd 0:0:1:0: [sg0] tag#4211 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 544.394991] sd 0:0:1:0: [sg0] tag#4211 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 544.403932] sd 0:0:1:0: [sg0] tag#4211 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 544.412876] sd 0:0:1:0: [sg0] tag#4211 CDB[70]: 00 00 20 00 00 00 00 16:11:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000b4fe38b3552c1de416f58a7b370000000000000003000000140001800d0001007564703a79790df59f0dd273de05787a3000000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001580)={0x204, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x633}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x471}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x248}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf8ed}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc14}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40080}, 0x20000090) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000001540)={r5, &(0x7f0000000540)=""/4096}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000a32b48d675aa9d30f470a26b87cdf43249d1578dd1e848e72260d12d133064c5576b3316a9be65617a4a06b9a8ae968697a621cccc55793d6a7bbe788c1677a0b2f37c3bcfdb672c696bb7c1cecc0085319532691ce5532fc0be82b5c67937", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000014", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:20 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x8, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '{^#:+$\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x240040c7}, 0x4000050) 16:11:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000017", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002048000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:20 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x84) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x111840, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x8800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0x10000000}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 16:11:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000005f", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 544.918282] sd 0:0:1:0: [sg0] tag#4212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 544.927393] sd 0:0:1:0: [sg0] tag#4212 CDB: Variable length, sa=0x0 [ 544.933861] sd 0:0:1:0: [sg0] tag#4212 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 544.942825] sd 0:0:1:0: [sg0] tag#4212 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 544.951759] sd 0:0:1:0: [sg0] tag#4212 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080), 0x1, 0x3) prctl$PR_MCE_KILL_GET(0x22) 16:11:21 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000204c000000000040000000000008000000", 0x200000bf}], 0x2) [ 544.960692] sd 0:0:1:0: [sg0] tag#4212 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 544.969618] sd 0:0:1:0: [sg0] tag#4212 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 544.978540] sd 0:0:1:0: [sg0] tag#4212 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 544.987463] sd 0:0:1:0: [sg0] tag#4212 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 544.996379] sd 0:0:1:0: [sg0] tag#4212 CDB[70]: 00 00 20 00 00 00 00 16:11:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:21 executing program 4: read$sequencer(0xffffffffffffffff, &(0x7f0000000200)=""/36, 0x24) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x17, 0x18, 0x113, &(0x7f0000000280)}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000080)=0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000050000000000010000000c0001c00600010000000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000680)=0xffffffffffffffff) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_collapse_range\x00', r6}, 0x10) 16:11:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000fb", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 545.210835] sd 0:0:1:0: [sg0] tag#4213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 545.219849] sd 0:0:1:0: [sg0] tag#4213 CDB: Variable length, sa=0x0 [ 545.226371] sd 0:0:1:0: [sg0] tag#4213 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 545.235284] sd 0:0:1:0: [sg0] tag#4213 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 545.244173] sd 0:0:1:0: [sg0] tag#4213 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xfffffff1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:21 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 545.253095] sd 0:0:1:0: [sg0] tag#4213 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 545.262002] sd 0:0:1:0: [sg0] tag#4213 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 545.270918] sd 0:0:1:0: [sg0] tag#4213 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 545.279833] sd 0:0:1:0: [sg0] tag#4213 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 545.288770] sd 0:0:1:0: [sg0] tag#4213 CDB[70]: 00 00 20 00 00 00 00 16:11:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002060000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}]}, 0x74}}, 0x0) 16:11:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000fe", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:21 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 545.491060] sd 0:0:1:0: [sg0] tag#4214 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 545.499989] sd 0:0:1:0: [sg0] tag#4214 CDB: Variable length, sa=0x0 [ 545.506518] sd 0:0:1:0: [sg0] tag#4214 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 545.515457] sd 0:0:1:0: [sg0] tag#4214 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 545.524341] sd 0:0:1:0: [sg0] tag#4214 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 545.533269] sd 0:0:1:0: [sg0] tag#4214 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 545.542215] sd 0:0:1:0: [sg0] tag#4214 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 545.551162] sd 0:0:1:0: [sg0] tag#4214 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 545.560103] sd 0:0:1:0: [sg0] tag#4214 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 545.569025] sd 0:0:1:0: [sg0] tag#4214 CDB[70]: 00 00 20 00 00 00 00 16:11:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002068000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000ff", 0x15, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20200000000000000500", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0001800600010000000000"], 0x20}}, 0x0) 16:11:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x3c}}, 0x0) [ 545.726457] sd 0:0:1:0: [sg0] tag#4215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 545.735365] sd 0:0:1:0: [sg0] tag#4215 CDB: Variable length, sa=0x0 [ 545.741846] sd 0:0:1:0: [sg0] tag#4215 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 545.750808] sd 0:0:1:0: [sg0] tag#4215 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 545.759792] sd 0:0:1:0: [sg0] tag#4215 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 545.768751] sd 0:0:1:0: [sg0] tag#4215 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 545.777703] sd 0:0:1:0: [sg0] tag#4215 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 545.786636] sd 0:0:1:0: [sg0] tag#4215 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 545.795575] sd 0:0:1:0: [sg0] tag#4215 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 545.804472] sd 0:0:1:0: [sg0] tag#4215 CDB[70]: 00 00 20 00 00 00 00 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x25, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000206c000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 546.028418] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.028418] [ 546.074578] sd 0:0:1:0: [sg0] tag#4216 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 546.083937] sd 0:0:1:0: [sg0] tag#4216 CDB: Variable length, sa=0x0 [ 546.090479] sd 0:0:1:0: [sg0] tag#4216 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 546.099405] sd 0:0:1:0: [sg0] tag#4216 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 546.108333] sd 0:0:1:0: [sg0] tag#4216 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x5f, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 546.117254] sd 0:0:1:0: [sg0] tag#4216 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 546.126273] sd 0:0:1:0: [sg0] tag#4216 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 546.135190] sd 0:0:1:0: [sg0] tag#4216 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 546.144070] sd 0:0:1:0: [sg0] tag#4216 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 546.152981] sd 0:0:1:0: [sg0] tag#4216 CDB[70]: 00 00 20 00 00 00 00 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 546.353983] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.353983] 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002070000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0xe0, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 546.558161] sd 0:0:1:0: [sg0] tag#4217 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 546.567076] sd 0:0:1:0: [sg0] tag#4217 CDB: Variable length, sa=0x0 [ 546.573545] sd 0:0:1:0: [sg0] tag#4217 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 546.582529] sd 0:0:1:0: [sg0] tag#4217 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 546.591512] sd 0:0:1:0: [sg0] tag#4217 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 546.600554] sd 0:0:1:0: [sg0] tag#4217 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 546.609494] sd 0:0:1:0: [sg0] tag#4217 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 546.618428] sd 0:0:1:0: [sg0] tag#4217 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 546.627349] sd 0:0:1:0: [sg0] tag#4217 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 546.636273] sd 0:0:1:0: [sg0] tag#4217 CDB[70]: 00 00 20 00 00 00 00 [ 546.656679] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.656679] [ 546.674979] sd 0:0:1:0: [sg0] tag#4218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 546.684050] sd 0:0:1:0: [sg0] tag#4218 CDB: Variable length, sa=0x0 [ 546.690540] sd 0:0:1:0: [sg0] tag#4218 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 546.699459] sd 0:0:1:0: [sg0] tag#4218 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 546.708391] sd 0:0:1:0: [sg0] tag#4218 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 546.717331] sd 0:0:1:0: [sg0] tag#4218 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 546.726262] sd 0:0:1:0: [sg0] tag#4218 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 546.735193] sd 0:0:1:0: [sg0] tag#4218 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 546.744079] sd 0:0:1:0: [sg0] tag#4218 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 546.753005] sd 0:0:1:0: [sg0] tag#4218 CDB[70]: 00 00 20 00 00 00 00 16:11:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x6, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:22 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0xfb, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:23 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002074000000000040000000000008000000", 0x200000bf}], 0x2) [ 547.017049] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.017049] 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x9, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0xffe0, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:23 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704031000000000600000207a000000000040000000000008000000", 0x200000bf}], 0x2) 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xa, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 547.335125] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.335125] 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088010000000040000000000008000000", 0x200000bf}], 0x2) 16:11:23 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0xffffffe0, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088020000000040000000000008000000", 0x200000bf}], 0x2) 16:11:23 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000030000000040000000000008000000", 0x200000bf}], 0x2) 16:11:23 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088030000000040000000000008000000", 0x200000bf}], 0x2) 16:11:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:24 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000050000000040000000000008000000", 0x200000bf}], 0x2) 16:11:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xf, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0xffffffffffffffe0, 0x8000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088050000000040000000000008000000", 0x200000bf}], 0x2) 16:11:24 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x10, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000060000000040000000000008000000", 0x200000bf}], 0x2) 16:11:24 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x24, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088060000000040000000000008000000", 0x200000bf}], 0x2) 16:11:24 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000070000000040000000000008000000", 0x200000bf}], 0x2) 16:11:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x60, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 548.774646] scsi_io_completion_action: 10 callbacks suppressed [ 548.774692] sd 0:0:1:0: [sg0] tag#4146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 548.791478] sd 0:0:1:0: [sg0] tag#4146 CDB: Variable length, sa=0x0 [ 548.797997] sd 0:0:1:0: [sg0] tag#4146 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 548.806942] sd 0:0:1:0: [sg0] tag#4146 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 548.815874] sd 0:0:1:0: [sg0] tag#4146 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 548.824810] sd 0:0:1:0: [sg0] tag#4146 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 548.833693] sd 0:0:1:0: [sg0] tag#4146 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 548.842609] sd 0:0:1:0: [sg0] tag#4146 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 548.851528] sd 0:0:1:0: [sg0] tag#4146 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 548.860440] sd 0:0:1:0: [sg0] tag#4146 CDB[70]: 00 00 20 00 00 00 00 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xf0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x4}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:25 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088070000000040000000000008000000", 0x200000bf}], 0x2) 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x300, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 549.199538] sd 0:0:1:0: [sg0] tag#4147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 549.208419] sd 0:0:1:0: [sg0] tag#4147 CDB: Variable length, sa=0x0 [ 549.214954] sd 0:0:1:0: [sg0] tag#4147 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 549.223841] sd 0:0:1:0: [sg0] tag#4147 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 549.232812] sd 0:0:1:0: [sg0] tag#4147 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 549.241784] sd 0:0:1:0: [sg0] tag#4147 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 549.250749] sd 0:0:1:0: [sg0] tag#4147 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 549.259689] sd 0:0:1:0: [sg0] tag#4147 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 549.268621] sd 0:0:1:0: [sg0] tag#4147 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 549.277682] sd 0:0:1:0: [sg0] tag#4147 CDB[70]: 00 00 20 00 00 00 00 16:11:25 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x2000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x500, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:25 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x4000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x600, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002088080000000040000000000008000000", 0x200000bf}], 0x2) 16:11:25 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x900, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 549.695302] sd 0:0:1:0: [sg0] tag#4219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 549.704133] sd 0:0:1:0: [sg0] tag#4219 CDB: Variable length, sa=0x0 [ 549.710681] sd 0:0:1:0: [sg0] tag#4219 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 549.719613] sd 0:0:1:0: [sg0] tag#4219 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 549.728562] sd 0:0:1:0: [sg0] tag#4219 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x6000}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:25 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 549.737493] sd 0:0:1:0: [sg0] tag#4219 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 549.746411] sd 0:0:1:0: [sg0] tag#4219 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 549.755343] sd 0:0:1:0: [sg0] tag#4219 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 549.764217] sd 0:0:1:0: [sg0] tag#4219 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 549.773137] sd 0:0:1:0: [sg0] tag#4219 CDB[70]: 00 00 20 00 00 00 00 16:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xa00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:26 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x7f00}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xb00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:26 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040310000000006000002000090000000040000000000008000000", 0x200000bf}], 0x2) 16:11:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xba4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8002}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 550.252783] sd 0:0:1:0: [sg0] tag#4148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 550.261656] sd 0:0:1:0: [sg0] tag#4148 CDB: Variable length, sa=0x0 [ 550.268248] sd 0:0:1:0: [sg0] tag#4148 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 550.277187] sd 0:0:1:0: [sg0] tag#4148 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 550.286127] sd 0:0:1:0: [sg0] tag#4148 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 [ 550.295084] sd 0:0:1:0: [sg0] tag#4148 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 550.303998] sd 0:0:1:0: [sg0] tag#4148 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 550.314188] sd 0:0:1:0: [sg0] tag#4148 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 550.323472] sd 0:0:1:0: [sg0] tag#4148 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 550.332415] sd 0:0:1:0: [sg0] tag#4148 CDB[70]: 00 00 20 00 00 00 00 16:11:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xc00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:26 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000020000a0000000040000000000008000000", 0x200000bf}], 0x2) 16:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8003}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xe00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 550.589391] sd 0:0:1:0: [sg0] tag#4220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 550.598437] sd 0:0:1:0: [sg0] tag#4220 CDB: Variable length, sa=0x0 [ 550.604973] sd 0:0:1:0: [sg0] tag#4220 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 550.613867] sd 0:0:1:0: [sg0] tag#4220 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 550.622800] sd 0:0:1:0: [sg0] tag#4220 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000020880a0000000040000000000008000000", 0x200000bf}], 0x2) 16:11:26 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 550.631887] sd 0:0:1:0: [sg0] tag#4220 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 550.640934] sd 0:0:1:0: [sg0] tag#4220 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 550.649870] sd 0:0:1:0: [sg0] tag#4220 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 550.658785] sd 0:0:1:0: [sg0] tag#4220 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 550.667716] sd 0:0:1:0: [sg0] tag#4220 CDB[70]: 00 00 20 00 00 00 00 16:11:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xf00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8004}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 550.805367] sd 0:0:1:0: [sg0] tag#4149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 550.814184] sd 0:0:1:0: [sg0] tag#4149 CDB: Variable length, sa=0x0 [ 550.820750] sd 0:0:1:0: [sg0] tag#4149 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 550.830789] sd 0:0:1:0: [sg0] tag#4149 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 550.840123] sd 0:0:1:0: [sg0] tag#4149 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8005}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 550.849093] sd 0:0:1:0: [sg0] tag#4149 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 550.858047] sd 0:0:1:0: [sg0] tag#4149 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 550.867011] sd 0:0:1:0: [sg0] tag#4149 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 550.875960] sd 0:0:1:0: [sg0] tag#4149 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 550.884885] sd 0:0:1:0: [sg0] tag#4149 CDB[70]: 00 00 20 00 00 00 00 16:11:27 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x2400, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8006}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x3f00, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:27 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000020000b0000000040000000000008000000", 0x200000bf}], 0x2) 16:11:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8007}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) [ 551.255907] sd 0:0:1:0: [sg0] tag#4150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 551.264813] sd 0:0:1:0: [sg0] tag#4150 CDB: Variable length, sa=0x0 [ 551.271268] sd 0:0:1:0: [sg0] tag#4150 CDB[00]: 7f 45 4c 46 02 01 01 03 00 00 00 00 00 00 00 00 [ 551.280618] sd 0:0:1:0: [sg0] tag#4150 CDB[10]: 02 00 3e 00 01 00 00 00 c0 1a 40 00 00 00 00 00 [ 551.289574] sd 0:0:1:0: [sg0] tag#4150 CDB[20]: 40 00 00 00 00 00 00 00 a8 08 1a 00 00 00 00 00 16:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x5865, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) [ 551.298534] sd 0:0:1:0: [sg0] tag#4150 CDB[30]: 00 00 00 00 40 00 38 00 06 00 40 00 29 00 26 00 [ 551.307476] sd 0:0:1:0: [sg0] tag#4150 CDB[40]: 01 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 [ 551.316409] sd 0:0:1:0: [sg0] tag#4150 CDB[50]: 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 [ 551.325351] sd 0:0:1:0: [sg0] tag#4150 CDB[60]: db 55 14 00 00 00 00 00 db 55 14 00 00 00 00 00 [ 551.334233] sd 0:0:1:0: [sg0] tag#4150 CDB[70]: 00 00 20 00 00 00 00 16:11:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8009}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200)) 16:11:27 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 16:11:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770403100000000060000020880b0000000040000000000008000000", 0x200000bf}], 0x2) 16:11:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x6000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) 16:11:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x800b}, {&(0x7f00000002c0)="10c4645f010000000100000001000000040000000b000000002000000000000002000000000000000100000000000100000000000022a5", 0x37, 0xb200}], 0x0, &(0x7f000006d200))