ey : Illegal Request [current] 
[ 1192.822514][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000b5000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:17 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:17 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x0, 0x0)

06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1193.270077][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.278377][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1193.288246][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.296309][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:18 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000020000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1193.311607][    C1] sd 0:0:1:0: tag#2119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1193.321473][    C1] sd 0:0:1:0: tag#2119 CDB: opcode=0xe5 (vendor)
[ 1193.327842][    C1] sd 0:0:1:0: tag#2119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1193.336900][    C1] sd 0:0:1:0: tag#2119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1193.345955][    C1] sd 0:0:1:0: tag#2119 CDB[20]: ba
06:41:18 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000100000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1193.376865][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.384897][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1193.392425][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.400432][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1193.409744][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.417877][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1193.460135][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.468336][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1193.517707][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.525760][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1193.739527][    C0] sd 0:0:1:0: tag#2125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1193.749478][    C0] sd 0:0:1:0: tag#2125 CDB: opcode=0xe5 (vendor)
[ 1193.755831][    C0] sd 0:0:1:0: tag#2125 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1193.764884][    C0] sd 0:0:1:0: tag#2125 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1193.773915][    C0] sd 0:0:1:0: tag#2125 CDB[20]: ba
[ 1193.779758][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1193.788061][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:18 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:18 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x0, 0x0)

06:41:18 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000100", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1194.166757][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.174938][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.179219][    C0] sd 0:0:1:0: tag#2128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1194.192335][    C0] sd 0:0:1:0: tag#2128 CDB: opcode=0xe5 (vendor)
[ 1194.198663][    C0] sd 0:0:1:0: tag#2128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1194.207702][    C0] sd 0:0:1:0: tag#2128 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
06:41:18 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:19 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:19 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1194.216748][    C0] sd 0:0:1:0: tag#2128 CDB[20]: ba
[ 1194.227816][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.235853][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.243478][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.251676][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:19 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1194.302955][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.311235][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.328732][    C0] sd 0:0:1:0: tag#2132 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1194.338681][    C0] sd 0:0:1:0: tag#2132 CDB: opcode=0xe5 (vendor)
[ 1194.345094][    C0] sd 0:0:1:0: tag#2132 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1194.354140][    C0] sd 0:0:1:0: tag#2132 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1194.363206][    C0] sd 0:0:1:0: tag#2132 CDB[20]: ba
[ 1194.372246][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.380329][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.388998][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:19 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1194.397306][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.446266][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.454302][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1194.463394][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.471431][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:19 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1194.598285][    C0] sd 0:0:1:0: tag#2143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1194.608129][    C0] sd 0:0:1:0: tag#2143 CDB: opcode=0xe5 (vendor)
[ 1194.614464][    C0] sd 0:0:1:0: tag#2143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1194.623512][    C0] sd 0:0:1:0: tag#2143 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1194.632696][    C0] sd 0:0:1:0: tag#2143 CDB[20]: ba
[ 1194.638678][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1194.646698][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:19 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:19 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:19 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000800", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:19 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:19 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000900", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1195.043145][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.051197][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1195.058891][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.066896][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1195.093667][    C0] sd 0:0:1:0: tag#2148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1195.097739][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.104041][    C0] sd 0:0:1:0: tag#2148 CDB: opcode=0xe5 (vendor)
[ 1195.112009][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1195.125786][    C0] sd 0:0:1:0: tag#2148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1195.134845][    C0] sd 0:0:1:0: tag#2148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
06:41:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:19 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1195.143914][    C0] sd 0:0:1:0: tag#2148 CDB[20]: ba
[ 1195.152544][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.160837][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:19 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1195.213599][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.221819][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:20 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1195.455594][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.463824][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, 0x0, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:20 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000d00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:20 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000007f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1195.956468][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.964628][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1195.987613][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1195.995745][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:20 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:20 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:20 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000e00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1196.006287][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.014558][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1196.080862][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.089312][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:20 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1196.131547][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.139846][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1196.168664][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:20 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000001000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1196.176979][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1196.230173][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.238465][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1196.261857][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.269877][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1196.317562][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.325764][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:21 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:21 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:21 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000004000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1196.811399][T18434] sg_write: 37 callbacks suppressed
[ 1196.811422][T18434] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1196.811422][T18434]    program syz-executor.5 not setting count and/or reply_len properly
[ 1196.835119][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.843330][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1196.852866][T18434] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1196.852866][T18434]    program syz-executor.5 not setting count and/or reply_len properly
[ 1196.870642][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1196.879022][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1196.885034][    C0] scsi_io_completion_action: 4 callbacks suppressed
[ 1196.885060][    C0] sd 0:0:1:0: tag#2167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1196.903880][    C0] sd 0:0:1:0: tag#2167 CDB: opcode=0xe5 (vendor)
06:41:21 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000100000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:21 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000afefff7f00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:21 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1196.910219][    C0] sd 0:0:1:0: tag#2167 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1196.919475][    C0] sd 0:0:1:0: tag#2167 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1196.928526][    C0] sd 0:0:1:0: tag#2167 CDB[20]: ba
[ 1196.971276][T18689] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1196.971276][T18689]    program syz-executor.5 not setting count and/or reply_len properly
[ 1196.974547][    C1] sd 0:0:1:0: tag#2168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1196.998515][    C1] sd 0:0:1:0: tag#2168 CDB: opcode=0xe5 (vendor)
[ 1197.004884][    C1] sd 0:0:1:0: tag#2168 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
06:41:21 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1197.014134][    C1] sd 0:0:1:0: tag#2168 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1197.023174][    C1] sd 0:0:1:0: tag#2168 CDB[20]: ba
[ 1197.029385][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.037747][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.048686][T18689] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.048686][T18689]    program syz-executor.5 not setting count and/or reply_len properly
06:41:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000007f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:21 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1197.071213][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.079263][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:21 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000007fffefaf00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1197.127828][    C1] sd 0:0:1:0: tag#2171 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1197.137701][    C1] sd 0:0:1:0: tag#2171 CDB: opcode=0xe5 (vendor)
[ 1197.144217][    C1] sd 0:0:1:0: tag#2171 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1197.153292][    C1] sd 0:0:1:0: tag#2171 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1197.162338][    C1] sd 0:0:1:0: tag#2171 CDB[20]: ba
[ 1197.171443][T18826] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.171443][T18826]    program syz-executor.1 not setting count and/or reply_len properly
[ 1197.204578][T18833] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.204578][T18833]    program syz-executor.5 not setting count and/or reply_len properly
[ 1197.224565][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.225343][T18833] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.225343][T18833]    program syz-executor.5 not setting count and/or reply_len properly
[ 1197.232598][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.232658][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.265341][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.273366][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.281390][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:22 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:22 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000100000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:22 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:22 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:22 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1197.720492][    C1] sd 0:0:1:0: tag#2175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1197.730346][    C1] sd 0:0:1:0: tag#2175 CDB: opcode=0xe5 (vendor)
[ 1197.736706][    C1] sd 0:0:1:0: tag#2175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1197.740806][T18938] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.740806][T18938]    program syz-executor.5 not setting count and/or reply_len properly
[ 1197.745745][    C1] sd 0:0:1:0: tag#2175 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1197.745766][    C1] sd 0:0:1:0: tag#2175 CDB[20]: ba
[ 1197.747181][T18943] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.747181][T18943]    program syz-executor.4 not setting count and/or reply_len properly
[ 1197.779190][T18938] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1197.779190][T18938]    program syz-executor.5 not setting count and/or reply_len properly
[ 1197.806171][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:22 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b500", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1197.820117][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.827642][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.835634][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.848395][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.856437][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:22 executing program 2:
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:22 executing program 2:
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1197.879677][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.887714][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1197.896760][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1197.904776][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:22 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000fffffff500", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1198.042947][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.050980][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:23 executing program 2:
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

06:41:23 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000ffffffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:23 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140), 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:23 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000fffffffb00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:23 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1198.582509][    C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1198.592390][    C0] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor)
[ 1198.598723][    C0] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1198.607992][    C0] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1198.617064][    C0] sd 0:0:1:0: tag#2118 CDB[20]: ba
06:41:23 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000002000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1198.625186][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.633365][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.641153][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.649232][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.672635][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:23 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1198.680695][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.699125][    C1] sd 0:0:1:0: tag#2122 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1198.708981][    C1] sd 0:0:1:0: tag#2122 CDB: opcode=0xe5 (vendor)
[ 1198.715339][    C1] sd 0:0:1:0: tag#2122 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1198.724433][    C1] sd 0:0:1:0: tag#2122 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1198.733483][    C1] sd 0:0:1:0: tag#2122 CDB[20]: ba
06:41:23 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:23 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000ffffefff00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:23 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x3, 0x0)

[ 1198.786754][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.794814][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.814839][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.822879][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:23 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000ffefffff00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:23 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:23 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000004000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1198.841552][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.849609][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.894635][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.902800][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.910592][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1198.912009][    C0] sd 0:0:1:0: tag#2128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1198.918599][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1198.928378][    C0] sd 0:0:1:0: tag#2128 CDB: opcode=0xe5 (vendor)
[ 1198.942240][    C0] sd 0:0:1:0: tag#2128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1198.951307][    C0] sd 0:0:1:0: tag#2128 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1198.960326][    C0] sd 0:0:1:0: tag#2128 CDB[20]: ba
06:41:24 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:24 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000007fffffff00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:24 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000008000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1199.462394][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.470454][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1199.481469][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.489582][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:24 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000f5ffffff00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1199.594549][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.602631][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1199.613239][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.621284][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:24 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000fbffffff00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:24 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000002000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

[ 1199.718673][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.726912][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1199.751211][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.759351][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:24 executing program 2:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1199.802291][    C0] sd 0:0:1:0: tag#2129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1199.812181][    C0] sd 0:0:1:0: tag#2129 CDB: opcode=0xe5 (vendor)
[ 1199.814787][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.818523][    C0] sd 0:0:1:0: tag#2129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1199.818542][    C0] sd 0:0:1:0: tag#2129 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1199.826507][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:24 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1199.835533][    C0] sd 0:0:1:0: tag#2129 CDB[20]: ba
06:41:24 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000009000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:24 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1199.927453][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.935488][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1199.956084][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1199.964145][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:24 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000002000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1199.992834][    C0] sd 0:0:1:0: tag#2143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1200.002739][    C0] sd 0:0:1:0: tag#2143 CDB: opcode=0xe5 (vendor)
[ 1200.009082][    C0] sd 0:0:1:0: tag#2143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1200.018137][    C0] sd 0:0:1:0: tag#2143 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1200.022315][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.027197][    C0] sd 0:0:1:0: tag#2143 CDB[20]: ba
[ 1200.040624][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.059625][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.067678][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.075176][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.083162][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.090668][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.098662][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:25 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000001000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000d000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:25 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1200.383504][    C0] sd 0:0:1:0: tag#2148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1200.393376][    C0] sd 0:0:1:0: tag#2148 CDB: opcode=0xe5 (vendor)
[ 1200.399706][    C0] sd 0:0:1:0: tag#2148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1200.408763][    C0] sd 0:0:1:0: tag#2148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1200.417800][    C0] sd 0:0:1:0: tag#2148 CDB[20]: ba
[ 1200.427025][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.435356][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.466669][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.474711][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:25 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1200.482238][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.490317][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000e000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:25 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000001000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:25 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:25 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000010000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1200.929224][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.937246][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.944730][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.952718][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.960169][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.968154][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.975629][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.983641][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1200.991405][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1200.999485][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.006995][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.015076][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.022579][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.031178][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.038670][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.046673][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.054183][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.062368][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:26 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:26 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000013000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:26 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200009000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1201.390875][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.398952][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.406509][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.414522][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.433022][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x101, 0xfffffff7, 0x0, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
symlink(0x0, 0x0)
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1201.441088][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.454216][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.462444][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:26 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000014000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1201.546700][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.555020][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.567821][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.576054][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.583737][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:26 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1201.591748][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000090000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1201.619383][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.627417][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.645161][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.653281][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1201.680932][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1201.688955][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:26 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:26 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000d0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1202.243657][    C0] scsi_io_completion_action: 5 callbacks suppressed
[ 1202.243685][    C0] sd 0:0:1:0: tag#2112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1202.260150][    C0] sd 0:0:1:0: tag#2112 CDB: opcode=0xe5 (vendor)
[ 1202.266502][    C0] sd 0:0:1:0: tag#2112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1202.275765][    C0] sd 0:0:1:0: tag#2112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1202.284812][    C0] sd 0:0:1:0: tag#2112 CDB[20]: ba
06:41:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x0, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1202.291411][T16366] sg_write: 46 callbacks suppressed
[ 1202.291456][T16366] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.291456][T16366]    program syz-executor.1 not setting count and/or reply_len properly
[ 1202.325011][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.333034][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1202.342659][T16676] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.342659][T16676]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.360466][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.369517][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1202.392308][T16390] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.392308][T16390]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.410871][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.418883][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000e0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1202.506690][T17200] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.506690][T17200]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.535114][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.543139][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1202.591311][T17200] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.591311][T17200]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.608829][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.616865][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1202.629029][    C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1202.638892][    C0] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor)
[ 1202.645252][    C0] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1202.654281][    C0] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1202.663311][    C0] sd 0:0:1:0: tag#2118 CDB[20]: ba
[ 1202.669595][T17413] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.669595][T17413]    program syz-executor.1 not setting count and/or reply_len properly
[ 1202.687815][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.696175][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1202.803811][T17715] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.803811][T17715]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.822176][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.830624][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1202.900133][T17715] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1202.900133][T17715]    program syz-executor.5 not setting count and/or reply_len properly
[ 1202.917715][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1202.926086][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000130000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:27 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000007f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1203.010909][    C1] sd 0:0:1:0: tag#2122 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1203.020813][    C1] sd 0:0:1:0: tag#2122 CDB: opcode=0xe5 (vendor)
[ 1203.027145][    C1] sd 0:0:1:0: tag#2122 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1203.036227][    C1] sd 0:0:1:0: tag#2122 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1203.045261][    C1] sd 0:0:1:0: tag#2122 CDB[20]: ba
06:41:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1203.058124][T17719] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1203.058124][T17719]    program syz-executor.1 not setting count and/or reply_len properly
[ 1203.106484][T17721] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1203.106484][T17721]    program syz-executor.5 not setting count and/or reply_len properly
[ 1203.158939][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.166994][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.174498][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.182488][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1203.302552][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.310824][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1203.345717][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.354027][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.367189][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.375226][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x0, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000140000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:28 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1203.420126][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.428441][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.438496][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.446789][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.497533][    C0] sd 0:0:1:0: tag#2130 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1203.507393][    C0] sd 0:0:1:0: tag#2130 CDB: opcode=0xe5 (vendor)
[ 1203.513748][    C0] sd 0:0:1:0: tag#2130 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1203.522809][    C0] sd 0:0:1:0: tag#2130 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1203.531872][    C0] sd 0:0:1:0: tag#2130 CDB[20]: ba
[ 1203.539465][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.547816][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.568117][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.576338][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000400000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1203.619658][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.627721][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.670197][    C0] sd 0:0:1:0: tag#2134 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1203.680053][    C0] sd 0:0:1:0: tag#2134 CDB: opcode=0xe5 (vendor)
[ 1203.686398][    C0] sd 0:0:1:0: tag#2134 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1203.695424][    C0] sd 0:0:1:0: tag#2134 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1203.704484][    C0] sd 0:0:1:0: tag#2134 CDB[20]: ba
06:41:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1203.714014][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.722262][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.734718][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.742908][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.792050][    C0] sd 0:0:1:0: tag#2137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1203.802006][    C0] sd 0:0:1:0: tag#2137 CDB: opcode=0xe5 (vendor)
[ 1203.808339][    C0] sd 0:0:1:0: tag#2137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1203.817374][    C0] sd 0:0:1:0: tag#2137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1203.826410][    C0] sd 0:0:1:0: tag#2137 CDB[20]: ba
[ 1203.833782][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1203.841922][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.850193][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.858226][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1203.909891][    C0] sd 0:0:1:0: tag#2140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1203.919861][    C0] sd 0:0:1:0: tag#2140 CDB: opcode=0xe5 (vendor)
[ 1203.926253][    C0] sd 0:0:1:0: tag#2140 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1203.935293][    C0] sd 0:0:1:0: tag#2140 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1203.944341][    C0] sd 0:0:1:0: tag#2140 CDB[20]: ba
06:41:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1203.955543][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1203.963893][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:28 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x0, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000001", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:28 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1204.156825][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.165096][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.186889][    C1] sd 0:0:1:0: tag#2143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1204.196746][    C1] sd 0:0:1:0: tag#2143 CDB: opcode=0xe5 (vendor)
[ 1204.203109][    C1] sd 0:0:1:0: tag#2143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1204.212181][    C1] sd 0:0:1:0: tag#2143 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1204.221309][    C1] sd 0:0:1:0: tag#2143 CDB[20]: ba
06:41:29 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000007f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000002", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1204.316266][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.324306][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.331832][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.339857][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.372419][    C0] sd 0:0:1:0: tag#2146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1204.382392][    C0] sd 0:0:1:0: tag#2146 CDB: opcode=0xe5 (vendor)
[ 1204.388723][    C0] sd 0:0:1:0: tag#2146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1204.398120][    C0] sd 0:0:1:0: tag#2146 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1204.407168][    C0] sd 0:0:1:0: tag#2146 CDB[20]: ba
06:41:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000004", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1204.421023][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.429174][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.483588][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.491621][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.499292][    C0] sd 0:0:1:0: tag#2150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1204.500524][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.510306][    C0] sd 0:0:1:0: tag#2150 CDB: opcode=0xe5 (vendor)
[ 1204.518295][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:29 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:29 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1204.524605][    C0] sd 0:0:1:0: tag#2150 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1204.541080][    C0] sd 0:0:1:0: tag#2150 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1204.550131][    C0] sd 0:0:1:0: tag#2150 CDB[20]: ba
[ 1204.616863][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.625172][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.645525][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.653812][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:29 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000ffffffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1204.735117][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.743184][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1204.751182][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1204.759205][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000008", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0x0, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:29 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000002000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:29 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1204.992756][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.001057][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:29 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000004000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1205.142678][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.150724][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

[ 1205.250422][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.258572][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x0, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000008000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1205.340773][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.348887][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1205.417716][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.425997][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x0, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1205.497414][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.506123][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000009", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:30 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000009000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x0, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

[ 1205.735822][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.744013][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x0, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1205.845580][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.853819][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000d000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1205.933091][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1205.941392][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x0, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x0, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1206.118263][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1206.126461][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1206.147540][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1206.155566][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:31 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000e000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:31 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000000d", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

[ 1206.756139][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1206.764396][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1206.787607][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1206.795927][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1206.876627][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1206.884782][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:31 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000000e", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000010000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1206.999144][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1207.007434][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1207.097370][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1207.105679][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1207.168116][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1207.176262][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:32 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000010", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x0, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:32 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000b4000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1207.642307][T28083] sg_write: 40 callbacks suppressed
[ 1207.642331][T28083] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1207.642331][T28083]    program syz-executor.5 not setting count and/or reply_len properly
[ 1207.665952][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1207.674225][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:32 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000013", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x0, 0x0)

[ 1207.803648][    C1] scsi_io_completion_action: 4 callbacks suppressed
[ 1207.803677][    C1] sd 0:0:1:0: tag#2117 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1207.820123][    C1] sd 0:0:1:0: tag#2117 CDB: opcode=0xe5 (vendor)
[ 1207.826478][    C1] sd 0:0:1:0: tag#2117 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1207.835536][    C1] sd 0:0:1:0: tag#2117 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1207.844566][    C1] sd 0:0:1:0: tag#2117 CDB[20]: ba
06:41:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x0, 0x0)

[ 1207.853419][T28868] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1207.853419][T28868]    program syz-executor.1 not setting count and/or reply_len properly
[ 1207.922748][T28083] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1207.922748][T28083]    program syz-executor.5 not setting count and/or reply_len properly
06:41:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x0, 0x0)

[ 1208.039757][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1208.047803][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1208.055330][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1208.063346][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000b5000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000014", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000040", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1208.600711][T30751] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1208.600711][T30751]    program syz-executor.5 not setting count and/or reply_len properly
[ 1208.619486][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1208.627837][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1208.702969][    C0] sd 0:0:1:0: tag#2121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1208.712957][    C0] sd 0:0:1:0: tag#2121 CDB: opcode=0xe5 (vendor)
[ 1208.719299][    C0] sd 0:0:1:0: tag#2121 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1208.728436][    C0] sd 0:0:1:0: tag#2121 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1208.737503][    C0] sd 0:0:1:0: tag#2121 CDB[20]: ba
[ 1208.744332][T31798] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1208.744332][T31798]    program syz-executor.1 not setting count and/or reply_len properly
[ 1208.762549][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1208.770898][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1208.825233][T30751] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1208.825233][T30751]    program syz-executor.5 not setting count and/or reply_len properly
[ 1208.843139][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1208.851493][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:33 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000090000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:33 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1209.006452][  T390] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1209.006452][  T390]    program syz-executor.5 not setting count and/or reply_len properly
[ 1209.025184][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.033473][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000afefff7f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1209.151464][  T846] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1209.151464][  T846]    program syz-executor.5 not setting count and/or reply_len properly
[ 1209.169923][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.178186][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.254542][    C0] sd 0:0:1:0: tag#2126 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1209.264418][    C0] sd 0:0:1:0: tag#2126 CDB: opcode=0xe5 (vendor)
[ 1209.270785][    C0] sd 0:0:1:0: tag#2126 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1209.279809][    C0] sd 0:0:1:0: tag#2126 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1209.288900][    C0] sd 0:0:1:0: tag#2126 CDB[20]: ba
06:41:34 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1209.299081][ T1263] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1209.299081][ T1263]    program syz-executor.1 not setting count and/or reply_len properly
[ 1209.317492][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.325671][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000d0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1209.413534][ T1910] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1209.413534][ T1910]    program syz-executor.5 not setting count and/or reply_len properly
[ 1209.431773][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.440043][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000007fffefaf", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000e0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1209.461384][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.469437][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.517497][    C1] sd 0:0:1:0: tag#2130 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1209.527371][    C1] sd 0:0:1:0: tag#2130 CDB: opcode=0xe5 (vendor)
[ 1209.533722][    C1] sd 0:0:1:0: tag#2130 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1209.542768][    C1] sd 0:0:1:0: tag#2130 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1209.551815][    C1] sd 0:0:1:0: tag#2130 CDB[20]: ba
[ 1209.576002][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.584074][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.614099][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000fffffff5", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1209.622157][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.646078][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.654097][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000400000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1209.740016][    C0] sd 0:0:1:0: tag#2138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1209.749998][    C0] sd 0:0:1:0: tag#2138 CDB: opcode=0xe5 (vendor)
[ 1209.756344][    C0] sd 0:0:1:0: tag#2138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1209.765396][    C0] sd 0:0:1:0: tag#2138 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1209.774432][    C0] sd 0:0:1:0: tag#2138 CDB[20]: ba
06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000b40000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1209.823149][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.831201][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.855920][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.863997][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.904947][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.913195][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1209.924707][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1209.932733][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000b50000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1210.102127][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.110368][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1210.138153][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.146404][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000fffffffb", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:34 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:34 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1210.274928][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.283148][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1210.304627][    C0] sd 0:0:1:0: tag#2146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1210.314588][    C0] sd 0:0:1:0: tag#2146 CDB: opcode=0xe5 (vendor)
[ 1210.320957][    C0] sd 0:0:1:0: tag#2146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1210.329986][    C0] sd 0:0:1:0: tag#2146 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1210.333467][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.339036][    C0] sd 0:0:1:0: tag#2146 CDB[20]: ba
[ 1210.352387][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1210.378009][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.386485][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000ffffefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:35 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000001000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1210.485725][    C1] sd 0:0:1:0: tag#2149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1210.495578][    C1] sd 0:0:1:0: tag#2149 CDB: opcode=0xe5 (vendor)
[ 1210.501918][    C1] sd 0:0:1:0: tag#2149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1210.510980][    C1] sd 0:0:1:0: tag#2149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1210.520149][    C1] sd 0:0:1:0: tag#2149 CDB[20]: ba
06:41:35 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:35 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000001", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000ffefffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1210.628951][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.636981][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1210.644513][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.652517][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1210.660013][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1210.668036][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000007fffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:35 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000002", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:35 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1211.236756][    C1] sd 0:0:1:0: tag#2153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1211.246612][    C1] sd 0:0:1:0: tag#2153 CDB: opcode=0xe5 (vendor)
[ 1211.252987][    C1] sd 0:0:1:0: tag#2153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1211.262036][    C1] sd 0:0:1:0: tag#2153 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1211.271069][    C1] sd 0:0:1:0: tag#2153 CDB[20]: ba
[ 1211.276243][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1211.284378][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1211.285372][    C0] sd 0:0:1:0: tag#2156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1211.291863][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1211.301660][    C0] sd 0:0:1:0: tag#2156 CDB: opcode=0xe5 (vendor)
[ 1211.309605][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1211.323406][    C0] sd 0:0:1:0: tag#2156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1211.332478][    C0] sd 0:0:1:0: tag#2156 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1211.341517][    C0] sd 0:0:1:0: tag#2156 CDB[20]: ba
[ 1211.428717][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1211.436762][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1211.461903][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1211.469953][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:35 executing program 4:
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:36 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000004", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1211.956033][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1211.964284][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1212.101033][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1212.109213][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:37 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000008", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000f5ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1212.521601][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1212.529783][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1212.566083][    C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1212.575970][    C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor)
[ 1212.582367][    C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1212.591498][    C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1212.600544][    C0] sd 0:0:1:0: tag#2162 CDB[20]: ba
[ 1212.618994][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1212.627266][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1212.689206][T12006] sg_write: 24 callbacks suppressed
[ 1212.689261][T12006] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1212.689261][T12006]    program syz-executor.5 not setting count and/or reply_len properly
[ 1212.712483][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1212.720702][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:37 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000009", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:37 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1212.879387][T12784] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1212.879387][T12784]    program syz-executor.5 not setting count and/or reply_len properly
[ 1212.897926][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1212.906095][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1213.233794][T12784] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1213.233794][T12784]    program syz-executor.5 not setting count and/or reply_len properly
[ 1213.252235][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1213.260237][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:38 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000000d", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1213.439343][T15315] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1213.439343][T15315]    program syz-executor.5 not setting count and/or reply_len properly
[ 1213.457763][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1213.466022][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:38 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000fbffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1213.569620][T15618] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1213.569620][T15618]    program syz-executor.5 not setting count and/or reply_len properly
[ 1213.587780][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1213.596030][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

[ 1213.628937][    C1] sd 0:0:1:0: tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1213.638920][    C1] sd 0:0:1:0: tag#2169 CDB: opcode=0xe5 (vendor)
[ 1213.645301][    C1] sd 0:0:1:0: tag#2169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1213.654361][    C1] sd 0:0:1:0: tag#2169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1213.663496][    C1] sd 0:0:1:0: tag#2169 CDB[20]: ba
[ 1213.673435][T15766] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1213.673435][T15766]    program syz-executor.1 not setting count and/or reply_len properly
06:41:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:38 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000000e", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:38 executing program 4:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)

06:41:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

[ 1214.030129][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1214.038194][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1214.084602][T17695] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1214.084602][T17695]    program syz-executor.5 not setting count and/or reply_len properly
[ 1214.112654][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1214.120698][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1214.706110][    C1] sd 0:0:1:0: tag#2112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1214.715978][    C1] sd 0:0:1:0: tag#2112 CDB: opcode=0xe5 (vendor)
[ 1214.722436][    C1] sd 0:0:1:0: tag#2112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1214.731501][    C1] sd 0:0:1:0: tag#2112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1214.740542][    C1] sd 0:0:1:0: tag#2112 CDB[20]: ba
06:41:39 executing program 3:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)

06:41:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000010", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1214.902883][T21565] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1214.902883][T21565]    program syz-executor.5 not setting count and/or reply_len properly
[ 1214.933832][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1214.942039][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1215.325697][T21565] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1215.325697][T21565]    program syz-executor.5 not setting count and/or reply_len properly
[ 1215.344169][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1215.352195][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:40 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000040", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1215.460266][    C1] sd 0:0:1:0: tag#2115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1215.470161][    C1] sd 0:0:1:0: tag#2115 CDB: opcode=0xe5 (vendor)
[ 1215.470935][T23475] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1215.470935][T23475]    program syz-executor.5 not setting count and/or reply_len properly
[ 1215.476537][    C1] sd 0:0:1:0: tag#2115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
06:41:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:40 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000afefff7f", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1215.476567][    C1] sd 0:0:1:0: tag#2115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1215.476585][    C1] sd 0:0:1:0: tag#2115 CDB[20]: ba
[ 1215.493183][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1215.525333][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1215.591173][    C0] sd 0:0:1:0: tag#2120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1215.601055][    C0] sd 0:0:1:0: tag#2120 CDB: opcode=0xe5 (vendor)
[ 1215.602883][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1215.607465][    C0] sd 0:0:1:0: tag#2120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1215.615439][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1215.624456][    C0] sd 0:0:1:0: tag#2120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
06:41:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1215.631917][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1215.640919][    C0] sd 0:0:1:0: tag#2120 CDB[20]: ba
[ 1215.648879][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1215.648908][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1215.669494][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:40 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000007fffefaf", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:40 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000b4", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1216.937773][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1216.947122][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1216.954621][    C1] sd 0:0:1:0: tag#2122 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s
[ 1216.964461][    C1] sd 0:0:1:0: tag#2122 CDB: opcode=0xe5 (vendor)
[ 1216.970805][    C1] sd 0:0:1:0: tag#2122 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1216.979915][    C1] sd 0:0:1:0: tag#2122 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1216.989179][    C1] sd 0:0:1:0: tag#2122 CDB[20]: ba
[ 1216.994374][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.002890][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.010370][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.018375][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.026020][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.034108][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.041654][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.049633][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.057231][    C1] sd 0:0:1:0: tag#2127 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1217.067139][    C1] sd 0:0:1:0: tag#2127 CDB: opcode=0xe5 (vendor)
[ 1217.073488][    C1] sd 0:0:1:0: tag#2127 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1217.082533][    C1] sd 0:0:1:0: tag#2127 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1217.091631][    C1] sd 0:0:1:0: tag#2127 CDB[20]: ba
[ 1217.096804][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.104802][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.112458][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.120461][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.128251][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1217.136281][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1217.884453][  T677] sg_write: 12 callbacks suppressed
[ 1217.884475][  T677] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1217.884475][  T677]    program syz-executor.5 not setting count and/or reply_len properly
[ 1217.937371][  T677] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1217.937371][  T677]    program syz-executor.5 not setting count and/or reply_len properly
[ 1218.123839][ T1392] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1218.123839][ T1392]    program syz-executor.5 not setting count and/or reply_len properly
[ 1218.213048][ T1392] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1218.213048][ T1392]    program syz-executor.5 not setting count and/or reply_len properly
[ 1218.594752][ T3563] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1218.594752][ T3563]    program syz-executor.5 not setting count and/or reply_len properly
06:41:40 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000b5", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:41 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000fffffff5", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1219.944883][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1219.952945][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1219.960437][    C1] sd 0:0:1:0: tag#2144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s
[ 1219.970326][    C1] sd 0:0:1:0: tag#2144 CDB: opcode=0xe5 (vendor)
[ 1219.976662][    C1] sd 0:0:1:0: tag#2144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1219.985702][    C1] sd 0:0:1:0: tag#2144 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1219.994756][    C1] sd 0:0:1:0: tag#2144 CDB[20]: ba
[ 1219.999894][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.007913][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.015423][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.023458][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.030971][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.038986][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.046477][    C1] sd 0:0:1:0: tag#2148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s
[ 1220.056316][    C1] sd 0:0:1:0: tag#2148 CDB: opcode=0xe5 (vendor)
[ 1220.062657][    C1] sd 0:0:1:0: tag#2148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1220.071791][    C1] sd 0:0:1:0: tag#2148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1220.080917][    C1] sd 0:0:1:0: tag#2148 CDB[20]: ba
[ 1220.086069][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.094071][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.101670][    C1] sd 0:0:1:0: tag#2150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s
[ 1220.111516][    C1] sd 0:0:1:0: tag#2150 CDB: opcode=0xe5 (vendor)
[ 1220.117852][    C1] sd 0:0:1:0: tag#2150 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1220.127006][    C1] sd 0:0:1:0: tag#2150 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1220.136141][    C1] sd 0:0:1:0: tag#2150 CDB[20]: ba
06:41:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(0x0)
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:42 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000fffffffb", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x0, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x0, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffffefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x0, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:42 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x0, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:43 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffefffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x0, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x0, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:44 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000007fffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1220.141296][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.149295][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.166775][T11298] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1220.166775][T11298]    program syz-executor.5 not setting count and/or reply_len properly
06:41:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1220.199837][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.207863][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.212587][T11298] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1220.212587][T11298]    program syz-executor.5 not setting count and/or reply_len properly
[ 1220.234050][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.242084][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.437065][    C1] sd 0:0:1:0: tag#2158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1220.446918][    C1] sd 0:0:1:0: tag#2158 CDB: opcode=0xe5 (vendor)
[ 1220.453279][    C1] sd 0:0:1:0: tag#2158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1220.462316][    C1] sd 0:0:1:0: tag#2158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1220.471367][    C1] sd 0:0:1:0: tag#2158 CDB[20]: ba
06:41:45 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000f5ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:45 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffefffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000))
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1220.631640][T12843] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1220.631640][T12843]    program syz-executor.5 not setting count and/or reply_len properly
[ 1220.715796][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.723922][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.736981][T13142] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1220.736981][T13142]    program syz-executor.4 not setting count and/or reply_len properly
06:41:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000))
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1220.779786][T13276] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1220.779786][T13276]    program syz-executor.5 not setting count and/or reply_len properly
[ 1220.826890][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.834935][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1220.842450][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1220.850444][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000))
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:45 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000fbffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:45 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1221.017532][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.025654][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1221.069419][    C1] sd 0:0:1:0: tag#2163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1221.079283][    C1] sd 0:0:1:0: tag#2163 CDB: opcode=0xe5 (vendor)
[ 1221.085625][    C1] sd 0:0:1:0: tag#2163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1221.094674][    C1] sd 0:0:1:0: tag#2163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1221.103818][    C1] sd 0:0:1:0: tag#2163 CDB[20]: ba
[ 1221.108971][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.116962][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000))
r4 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffefffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1221.294074][    C0] sd 0:0:1:0: tag#2165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1221.303958][    C0] sd 0:0:1:0: tag#2165 CDB: opcode=0xe5 (vendor)
[ 1221.310431][    C0] sd 0:0:1:0: tag#2165 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1221.319475][    C0] sd 0:0:1:0: tag#2165 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1221.328650][    C0] sd 0:0:1:0: tag#2165 CDB[20]: ba
[ 1221.335676][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:46 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1221.343884][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1221.352436][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.360435][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1221.471549][    C0] sd 0:0:1:0: tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1221.481406][    C0] sd 0:0:1:0: tag#2169 CDB: opcode=0xe5 (vendor)
[ 1221.487750][    C0] sd 0:0:1:0: tag#2169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1221.496805][    C0] sd 0:0:1:0: tag#2169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1221.505933][    C0] sd 0:0:1:0: tag#2169 CDB[20]: ba
06:41:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1221.642657][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.650727][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1221.653161][    C0] sd 0:0:1:0: tag#2172 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1221.658195][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.667993][    C0] sd 0:0:1:0: tag#2172 CDB: opcode=0xe5 (vendor)
[ 1221.675973][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1221.682382][    C0] sd 0:0:1:0: tag#2172 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1221.689820][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1221.698833][    C0] sd 0:0:1:0: tag#2172 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1221.706781][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1221.723261][    C0] sd 0:0:1:0: tag#2172 CDB[20]: ba
06:41:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffefffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0)

06:41:46 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

[ 1222.174838][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.182874][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.190361][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.198382][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x0, 0x0)

06:41:47 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1222.377788][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.385913][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.393410][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.401487][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x0, 0x0)

06:41:47 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1222.534952][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.542989][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.550508][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.558484][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

06:41:47 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1222.740728][    C1] sd 0:0:1:0: tag#2115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1222.750599][    C1] sd 0:0:1:0: tag#2115 CDB: opcode=0xe5 (vendor)
[ 1222.757053][    C1] sd 0:0:1:0: tag#2115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1222.766094][    C1] sd 0:0:1:0: tag#2115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1222.775143][    C1] sd 0:0:1:0: tag#2115 CDB[20]: ba
[ 1222.780284][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) (fail_nth: 1)

06:41:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x0, 0x0)

[ 1222.788278][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.795771][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.803860][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.914987][T20359] FAULT_INJECTION: forcing a failure.
[ 1222.914987][T20359] name failslab, interval 1, probability 0, space 0, times 0
[ 1222.927883][T20359] CPU: 0 PID: 20359 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 1222.936401][T20359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1222.946744][T20359] Call Trace:
[ 1222.949626][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1222.950020][T20359]  <TASK>
[ 1222.950028][T20359]  dump_stack_lvl+0xd6/0x122
[ 1222.958038][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1222.960912][T20359]  dump_stack+0x11/0x1b
[ 1222.977248][T20359]  should_fail+0x23c/0x250
[ 1222.981672][T20359]  __should_failslab+0x81/0x90
[ 1222.986572][T20359]  should_failslab+0x5/0x20
[ 1222.991097][T20359]  kmem_cache_alloc_node+0x61/0x2d0
[ 1222.996296][T20359]  ? dup_task_struct+0x63/0x680
[ 1223.001230][T20359]  dup_task_struct+0x63/0x680
[ 1223.005912][T20359]  copy_process+0x3f4/0x2f40
[ 1223.010535][T20359]  ? generic_splice_sendpage+0xd0/0xd0
[ 1223.016017][T20359]  ? generic_splice_sendpage+0x9f/0xd0
[ 1223.021490][T20359]  ? iter_file_splice_write+0x790/0x790
[ 1223.027195][T20359]  ? create_io_worker+0x2c0/0x2c0
[ 1223.032218][T20359]  create_io_thread+0x95/0xc0
[ 1223.036893][T20359]  ? create_io_worker+0x2c0/0x2c0
[ 1223.042475][T20359]  create_worker_cont+0x5a/0x320
[ 1223.045289][T20304] sg_write: 16 callbacks suppressed
[ 1223.045300][T20304] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.045300][T20304]    program syz-executor.5 not setting count and/or reply_len properly
[ 1223.047427][T20359]  ? fput+0x2d/0x130
[ 1223.047451][T20359]  task_work_run+0x8e/0x110
[ 1223.052908][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1223.069774][T20359]  exit_to_user_mode_prepare+0x102/0x190
[ 1223.073700][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1223.078160][T20359]  syscall_exit_to_user_mode+0x20/0x40
[ 1223.104759][T20359]  do_syscall_64+0x50/0xa0
[ 1223.109230][T20359]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1223.112682][    C1] sd 0:0:1:0: tag#2120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1223.115183][T20359] RIP: 0033:0x7f9598b58ae9
[ 1223.125178][    C1] sd 0:0:1:0: tag#2120 CDB: opcode=0xe5 (vendor)
[ 1223.129796][T20359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1223.136511][    C1] sd 0:0:1:0: tag#2120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1223.156079][T20359] RSP: 002b:00007f95968cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1223.156099][T20359] RAX: fffffffffffffe00 RBX: 00007f9598c6bf60 RCX: 00007f9598b58ae9
[ 1223.165109][    C1] sd 0:0:1:0: tag#2120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1223.173636][T20359] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[ 1223.173649][T20359] RBP: 00007f95968cf1d0 R08: 000000000004ffe0 R09: 0000000000000000
[ 1223.173661][T20359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
06:41:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0)

06:41:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x0, 0x0)

06:41:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) (fail_nth: 1)

06:41:47 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1223.181637][    C1] sd 0:0:1:0: tag#2120 CDB[20]: ba
[ 1223.190604][T20359] R13: 00007ffd46fb1a5f R14: 00007f95968cf300 R15: 0000000000022000
[ 1223.190622][T20359]  </TASK>
[ 1223.262605][T20548] FAULT_INJECTION: forcing a failure.
[ 1223.262605][T20548] name failslab, interval 1, probability 0, space 0, times 0
[ 1223.275371][T20548] CPU: 1 PID: 20548 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[ 1223.283790][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1223.293937][T20548] Call Trace:
[ 1223.297234][T20548]  <TASK>
[ 1223.300158][T20548]  dump_stack_lvl+0xd6/0x122
[ 1223.304754][T20548]  dump_stack+0x11/0x1b
[ 1223.308902][T20548]  should_fail+0x23c/0x250
[ 1223.313332][T20548]  __should_failslab+0x81/0x90
[ 1223.318133][T20548]  should_failslab+0x5/0x20
[ 1223.322941][T20548]  kmem_cache_alloc_node_trace+0x61/0x310
[ 1223.328692][T20548]  ? __splice_from_pipe+0x4b9/0x500
[ 1223.333895][T20548]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1223.340053][T20548]  ? create_io_worker+0x66/0x2c0
[ 1223.345027][T20548]  create_io_worker+0x66/0x2c0
[ 1223.349790][T20548]  io_wqe_enqueue+0x604/0x740
[ 1223.354500][T20548]  io_wq_enqueue+0x31/0x40
[ 1223.358922][T20548]  io_queue_async_work+0x202/0x430
[ 1223.364127][T20548]  __io_queue_sqe+0x2f7/0x450
[ 1223.368802][T20548]  ? io_req_task_submit+0x83/0xd0
[ 1223.373834][T20548]  io_req_task_submit+0x8b/0xd0
[ 1223.378716][T20548]  tctx_task_work+0x25a/0x410
[ 1223.383387][T20548]  task_work_run+0x8e/0x110
[ 1223.387887][T20548]  exit_to_user_mode_prepare+0x102/0x190
[ 1223.393641][T20548]  syscall_exit_to_user_mode+0x20/0x40
[ 1223.399102][T20548]  do_syscall_64+0x50/0xa0
[ 1223.403586][T20548]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1223.409502][T20548] RIP: 0033:0x7f7e621edae9
[ 1223.413955][T20548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1223.416598][T21052] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.416598][T21052]    program syz-executor.5 not setting count and/or reply_len properly
[ 1223.433566][T20548] RSP: 002b:00007f7e5ff64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[ 1223.433588][T20548] RAX: fffffffffffffe00 RBX: 00007f7e62300f60 RCX: 00007f7e621edae9
[ 1223.433600][T20548] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[ 1223.433707][T20548] RBP: 00007f7e5ff641d0 R08: 000000000004ffe0 R09: 0000000000000000
[ 1223.483481][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1223.491548][T20548] R13: 00007fffa2bb4a9f R14: 00007f7e5ff64300 R15: 0000000000022000
[ 1223.499663][T20548]  </TASK>
[ 1223.505106][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1223.513122][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1223.526511][T20941] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.526511][T20941]    program syz-executor.5 not setting count and/or reply_len properly
[ 1223.544600][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1223.553660][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:48 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1223.581344][T21347] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.581344][T21347]    program syz-executor.1 not setting count and/or reply_len properly
[ 1223.610181][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1223.618221][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1223.642082][T21441] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.642082][T21441]    program syz-executor.5 not setting count and/or reply_len properly
[ 1223.660176][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1223.668435][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1223.731151][T21518] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1223.731151][T21518]    program syz-executor.5 not setting count and/or reply_len properly
[ 1223.756577][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1223.764603][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0)

06:41:48 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:48 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:48 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0) (fail_nth: 1)

[ 1224.139950][T22504] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1224.139950][T22504]    program syz-executor.5 not setting count and/or reply_len properly
[ 1224.158573][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.166818][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.198882][T22605] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1224.198882][T22605]    program syz-executor.1 not setting count and/or reply_len properly
[ 1224.217371][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.225824][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.251932][T22810] FAULT_INJECTION: forcing a failure.
[ 1224.251932][T22810] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.256676][T22504] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1224.256676][T22504]    program syz-executor.5 not setting count and/or reply_len properly
[ 1224.264562][T22810] CPU: 1 PID: 22810 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0
[ 1224.264614][T22810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1224.300484][T22810] Call Trace:
[ 1224.303757][T22810]  <TASK>
[ 1224.306680][T22810]  dump_stack_lvl+0xd6/0x122
[ 1224.311438][T22810]  dump_stack+0x11/0x1b
[ 1224.315590][T22810]  should_fail+0x23c/0x250
[ 1224.320066][T22810]  ? sock_alloc_inode+0x23/0x90
[ 1224.324972][T22810]  __should_failslab+0x81/0x90
[ 1224.329748][T22810]  ? sockfs_init_fs_context+0x70/0x70
[ 1224.335221][T22810]  should_failslab+0x5/0x20
[ 1224.339871][T22810]  kmem_cache_alloc+0x4f/0x320
[ 1224.344637][T22810]  ? sockfs_init_fs_context+0x70/0x70
06:41:49 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1224.350010][T22810]  sock_alloc_inode+0x23/0x90
[ 1224.354687][T22810]  ? sockfs_init_fs_context+0x70/0x70
[ 1224.360152][T22810]  new_inode_pseudo+0x38/0x190
[ 1224.364917][T22810]  __sock_create+0x122/0x4e0
[ 1224.369657][T22810]  __sys_socket+0xb8/0x200
[ 1224.374093][T22810]  __x64_sys_socket+0x3b/0x50
[ 1224.378876][T22810]  do_syscall_64+0x44/0xa0
[ 1224.383346][T22810]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1224.389285][T22810] RIP: 0033:0x7f481aac7ae9
[ 1224.393756][T22810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1224.413367][T22810] RSP: 002b:00007f481883e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1224.419632][T22916] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1224.419632][T22916]    program syz-executor.5 not setting count and/or reply_len properly
[ 1224.421839][T22810] RAX: ffffffffffffffda RBX: 00007f481abdaf60 RCX: 00007f481aac7ae9
06:41:49 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1224.421855][T22810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1224.421866][T22810] RBP: 00007f481883e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1224.421879][T22810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1224.421891][T22810] R13: 00007fff1c43b6ff R14: 00007f481883e300 R15: 0000000000022000
[ 1224.421942][T22810]  </TASK>
[ 1224.422038][T22810] socket: no more sockets
[ 1224.491339][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:49 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1224.499463][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.506980][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.514979][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.522481][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.530662][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.538139][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.546163][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:49 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:49 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0) (fail_nth: 2)

06:41:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0xffffffffffffffff, 0x0)

[ 1224.705185][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.713207][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.720705][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.728682][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.736190][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.744201][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.751742][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.759734][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1224.767233][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1224.775221][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:41:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x2)

06:41:49 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1225.013407][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.021464][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0xffffffffffffffff, 0x0)

06:41:49 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xf)

[ 1225.097169][    C0] scsi_io_completion_action: 3 callbacks suppressed
[ 1225.097198][    C0] sd 0:0:1:0: tag#2145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1225.113660][    C0] sd 0:0:1:0: tag#2145 CDB: opcode=0xe5 (vendor)
[ 1225.120031][    C0] sd 0:0:1:0: tag#2145 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1225.129166][    C0] sd 0:0:1:0: tag#2145 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1225.138198][    C0] sd 0:0:1:0: tag#2145 CDB[20]: ba
06:41:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x77)

06:41:50 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1225.240016][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.248086][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xf00)

[ 1225.352778][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.360804][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1225.385566][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.393607][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:50 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x2)

[ 1225.475514][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.483804][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1225.508108][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.516164][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x7700)

06:41:50 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:50 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x4)

06:41:50 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x2, 0x100010, r0, 0x10000000)
r5 = syz_io_uring_setup(0x439f, &(0x7f00000002c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000001c0)={@empty, @private=0xa010102, @private=0xa010102}, 0xc)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
io_uring_enter(r9, 0x6370, 0xef9c, 0x0, 0x0, 0x0)
fsetxattr$security_evm(r9, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "f0c4ea1f4ccb8b499642f886ab6adc5f"}, 0x11, 0x3)
syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x9)
syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x2, r12}}, 0x5)

[ 1225.808452][    C1] sd 0:0:1:0: tag#2151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1225.818324][    C1] sd 0:0:1:0: tag#2151 CDB: opcode=0xe5 (vendor)
[ 1225.824706][    C1] sd 0:0:1:0: tag#2151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1225.833760][    C1] sd 0:0:1:0: tag#2151 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1225.842898][    C1] sd 0:0:1:0: tag#2151 CDB[20]: ba
06:41:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x1000000)

06:41:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1225.956698][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.964733][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1225.972233][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.980218][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1225.987727][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1225.995731][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:50 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd_index=0x5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="9ec45f82e98677d096b55030547560ffe2763c35774179940c75c905342d86a7f900609ccfe56354a62da887398a70952f02b352ab56ca074d993551ec3fdc505b010d9b425d9a63bfc971fe8049ba0e7c8f4de51cae436367c843d5dc", 0x5d}, {&(0x7f0000000140)="a2fdce5086a09b056e5b603fd67c4df1ded4fa376bfb5afcb04ad53ff5c7b38b088cc07ca1825b11f0faaa9f14eabe56129ca02ed4c515ac54d9b7553a9be2c177ae1542f5f23a13a053e1eaaedba8b904379da2912e11385619384a046aae4668259b07c9cb000b1e258e97e09454b836237572ffcb0888833dba6c16dd12323e07abbe2336a8106d33d660b5826bde69d8a7d77fba4a09d6ef380b242135ed78c9d06d31b7a9393b2e457ae1a4628c3c4d10738b538cf363287df311bdf0b6b737fc29f4029efc4fe5311f1c01ecb480147dfcc903327d52e4bdb7da8c73a9015a86985f6898ed708a72ce1f8449fa515fa952528c0e", 0xf7}, {&(0x7f0000000240)="243306d4e4187f49cb45086d45f48272c2bfebf265d576e93a62f8769a0ff2e0dededaf914d43a91fc523ea651888ac9cc6f89f429d3fe0a5462054f", 0x3c}, {&(0x7f0000000280)}, {&(0x7f0000000340)="22ae3582eac953e43d138c645f9c0446742713ec", 0x14}, {&(0x7f0000000380)="f5cccbaa27aa109d822e468718410447265b24cafacd6c978dd345cd40b0702c78a92c1a0aea0ee978b72c5fe002", 0x2e}, {&(0x7f00000003c0)="f8aa36e5e89dc6d9813535b5bb8405dcabd24ff95967a119b55e373b2d02e25f5e00cec7be19ca780666680a4e0eec869035779a2075321d5ba222ff9a143a28393dd688f3c9805e43be21aacc55babf42a9699423bbc894317ae60e673939049eebdcd984a308413535f9794fc9", 0x6e}], 0x7, 0x0, 0x0, {0x3, r3}}, 0x9)

06:41:50 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000ffffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:50 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x2000000)

[ 1226.064234][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.072638][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1226.107614][    C1] sd 0:0:1:0: tag#2156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1226.117475][    C1] sd 0:0:1:0: tag#2156 CDB: opcode=0xe5 (vendor)
[ 1226.123843][    C1] sd 0:0:1:0: tag#2156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1226.132899][    C1] sd 0:0:1:0: tag#2156 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1226.142001][    C1] sd 0:0:1:0: tag#2156 CDB[20]: ba
06:41:50 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2000, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xf000000)

06:41:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x8}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:51 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1226.309004][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.317049][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1226.342725][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.350757][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1226.366540][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.374553][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x6)

06:41:51 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x77000000)

06:41:51 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000020000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:51 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r7 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x9)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x8, 0x5, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0xa4)

[ 1226.684996][    C0] sd 0:0:1:0: tag#2160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1226.694873][    C0] sd 0:0:1:0: tag#2160 CDB: opcode=0xe5 (vendor)
[ 1226.701220][    C0] sd 0:0:1:0: tag#2160 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1226.710330][    C0] sd 0:0:1:0: tag#2160 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1226.719391][    C0] sd 0:0:1:0: tag#2160 CDB[20]: ba
[ 1226.726351][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.734601][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x100000000000000)

[ 1226.812930][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1226.820972][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:51 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x2000001, 0x110, r0, 0x10000000)
r5 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
io_uring_enter(r5, 0x636f, 0x0, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x9)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd=r5, 0xd12, 0x0, 0x0, 0x8, 0x1, {0x1, r12}}, 0x7e6)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r13 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x1000001, 0x58060f4de4928e7f, r0, 0x0)
r14 = fsmount(0xffffffffffffffff, 0x1, 0x0)
syz_io_uring_submit(r13, r2, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r14, &(0x7f0000000040)={0x16f000, 0x62, 0x1}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8)
socket(0x0, 0x0, 0x0)

06:41:51 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000ffffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x7)

06:41:52 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000040000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1227.540808][    C1] sd 0:0:1:0: tag#2163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1227.550692][    C1] sd 0:0:1:0: tag#2163 CDB: opcode=0xe5 (vendor)
[ 1227.557024][    C1] sd 0:0:1:0: tag#2163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1227.566086][    C1] sd 0:0:1:0: tag#2163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1227.575156][    C1] sd 0:0:1:0: tag#2163 CDB[20]: ba
[ 1227.580301][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1227.588300][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x200000000000000)

06:41:52 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x800}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
socket(0x0, 0x0, 0x0)

06:41:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xf)

[ 1227.798316][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1227.806360][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:52 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000020000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:52 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000040000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x30)

[ 1227.988312][T25054] sg_write: 26 callbacks suppressed
[ 1227.988336][T25054] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1227.988336][T25054]    program syz-executor.5 not setting count and/or reply_len properly
06:41:52 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000080000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:52 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x4)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2, 0x8e, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x1, 0x8)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0xf4304967f863b318, 0x2, 0x6)

[ 1228.089620][    C0] sd 0:0:1:0: tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1228.099524][    C0] sd 0:0:1:0: tag#2169 CDB: opcode=0xe5 (vendor)
[ 1228.105871][    C0] sd 0:0:1:0: tag#2169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1228.115014][    C0] sd 0:0:1:0: tag#2169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1228.124070][    C0] sd 0:0:1:0: tag#2169 CDB[20]: ba
[ 1228.139864][T25641] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.139864][T25641]    program syz-executor.1 not setting count and/or reply_len properly
[ 1228.200805][T26488] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.200805][T26488]    program syz-executor.5 not setting count and/or reply_len properly
06:41:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:53 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x3ff, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x1, {0x1}}, 0x200)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000840)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000008c0)="230426cdb891306e6300a5c9bc195d71dd129c9c7726746f3a099dddda67b7f60c603e1aa3ce550f4be4dc1ddaa8377793493162f594a7f914a1ce222405ea14", 0x40}, {&(0x7f0000000900)="55b229f29f961fe8515b09dbb195f8c4d30beb67d6774f76ad7a64b61a9f7ca4f8f20f990db460a2f90f2529539c94a7e8e968237bac29cccd7bc64c8c0a0f3625f15396548c6bee42856e720c26b3be", 0x50}, {&(0x7f0000000980)="5150075558357152d78304e4557bbc8bb1a33aa8fc4ce3022dd8f2879c9da513bd612ddc22aa32140f19dd2f0bcdf42fa8e5ea599ac3414ea96ff902048563e554", 0x41}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="3ebdd442668d69f3e37b3791aaccdb0d02c14650cf49b4734770edf8a27d80ae6c251d2c6acf129beab7b279e1441994a74db17e6d0bf0f436fe4f072449d6ac904d7bf44760af021b524928f1aead2c06d305be0472367dd5880a430338bfd4a9095332a59212259f0052699d528fe746231efad5324d248c95fde070e88ea0fb32ca7000ba4a5a3cefc873dfb0527df37d59fbbf4ccf097ccd6c8e0db6511026d49698fa583b02bfdede58052981ffbe990b8d47de0fa57b683dd9d62206ec9be4bdd4b0a9f9b075c9e78f60e8973739adaff6251955f0968a4017eaf32f0d0041b89b07e5dd90c31dca", 0xeb}], 0x5, &(0x7f0000001b80)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6472}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}, 0x20000010)
syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/33, 0x21}], 0x6}, 0x0, 0x1000, 0x1, {0x1}}, 0xfffffffc)
r4 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x3, &(0x7f00000003c0)}, 0x1010001)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000)
syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffc}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000009, 0x110, r0, 0x10000000)
syz_io_uring_submit(r5, r8, &(0x7f0000000800)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f00000006c0), &(0x7f00000007c0)='./file0\x00', 0x2, 0x0, 0x1}, 0x9)
socket(0x0, 0x0, 0x0)
io_uring_enter(r0, 0x6c44, 0x8d1c, 0x0, &(0x7f0000000040)={[0x200]}, 0x8)

06:41:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x50)

[ 1228.494829][T28302] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.494829][T28302]    program syz-executor.5 not setting count and/or reply_len properly
[ 1228.526547][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.534694][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.542228][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.551414][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.559038][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.567293][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.574809][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.582844][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:53 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000080000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:53 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000090000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1228.590346][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.598389][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.605884][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.613896][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.622978][T28302] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.622978][T28302]    program syz-executor.5 not setting count and/or reply_len properly
06:41:53 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000635000/0x2000)=nil, 0x2000, 0x64, 0x1, {0x0, r7}}, 0xff)
r8 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
io_uring_enter(r8, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r8, 0x15d9, 0xb6eb, 0x2, &(0x7f0000000080), 0x8)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x77)

06:41:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xf00000000000000)

[ 1228.665791][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.673830][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.718656][    C1] sd 0:0:1:0: tag#2174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1228.728515][    C1] sd 0:0:1:0: tag#2174 CDB: opcode=0xe5 (vendor)
[ 1228.735045][    C1] sd 0:0:1:0: tag#2174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1228.744132][    C1] sd 0:0:1:0: tag#2174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1228.753187][    C1] sd 0:0:1:0: tag#2174 CDB[20]: ba
06:41:53 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000090000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1228.840385][T29681] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.840385][T29681]    program syz-executor.5 not setting count and/or reply_len properly
06:41:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x600)

[ 1228.962109][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1228.970145][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1228.999548][T30875] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1228.999548][T30875]    program syz-executor.5 not setting count and/or reply_len properly
[ 1229.083342][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1229.092192][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:53 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000d0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:53 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xcf71, 0x200)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x100000, 0x0, 0x20082, 0xffffffff, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:53 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000d0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x700)

[ 1229.240819][    C1] sd 0:0:1:0: tag#2114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1229.250699][    C1] sd 0:0:1:0: tag#2114 CDB: opcode=0xe5 (vendor)
[ 1229.257046][    C1] sd 0:0:1:0: tag#2114 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1229.266096][    C1] sd 0:0:1:0: tag#2114 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1229.275144][    C1] sd 0:0:1:0: tag#2114 CDB[20]: ba
[ 1229.322589][  T314] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1229.322589][  T314]    program syz-executor.5 not setting count and/or reply_len properly
[ 1229.478175][ T1628] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1229.478175][ T1628]    program syz-executor.5 not setting count and/or reply_len properly
06:41:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x7700000000000000)

06:41:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xf00)

[ 1229.543248][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1229.551378][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1229.559064][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1229.567078][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:54 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
io_uring_enter(0xffffffffffffffff, 0x636f, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
io_uring_enter(r6, 0x636f, 0x0, 0x0, 0x0, 0x0)
r9 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
io_uring_enter(r9, 0x636f, 0x0, 0x0, 0x0, 0x0)
r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000004f40), 0x2000)
[ 1229.835290][ T2718] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1229.835290][ T2718]    program syz-executor.5 not setting count and/or reply_len properly
[ 1229.880946][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1229.889180][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1229.896683][    C1] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1229.906535][    C1] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor)
[ 1229.912881][    C1] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1229.922011][    C1] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="a37019cae2dbc86bfb19f57f95276a800b912946abad8ebe6f0783b7af93af909dcf8361c28f4f62f77016bfd70613c8348853482460d9083a2acf77c96b03b1c84ac23eb99bf7ebb971591a7b0d5f43e81b07c31f10f72d856d63e5e6baf424814f6b226a8e526293e0f112bdb07806e34159819494a355", 0x78}, {&(0x7f00000001c0)="485856b2b6f015", 0x7}, {&(0x7f0000000200)="cbce51e9a6ba794f71c6837b17e1b3e177243cd11043fd760c9be138d2e69c00b5b7797114328744276f5212bb590ce2f01bca60e602bacc6618dbfefcb01f15f5ce45815dc5282079ff53f454c6663c3e0666aeda9dd5ace22dcd60e01d88996ea6d08ad02eeb155343cf974951757d4d", 0x71}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x70, 0x40001}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)="472cd1fc68972fdff39ce48931facd4d0e69e036865c1a489e405170b33855e5853a04240f5edc6ca5690b0cc3c64b81db267f19302427dffca11e5a4501dce971eb8e83367c83f75b6e2639dae2a261ab4039c7828543bc5235296f48ff0acaaa0bcb2dbc1baba075537db9f187f439f693cf8d058d5bb962515f41acfac8c1d4", 0x81}, {&(0x7f0000000540)="ebc729f745bc539536c6edc2c6fb1796cd14d9c732350eddd7dc62bc8ecbd06107bf0e9691f1e6db88dae8f5c8227ef28de5", 0x32}, {&(0x7f0000000580)="cb515a292f30fac9c57f524f7a94023ef938d8f4182baf1f04ebbfc2a33858ea7267d7a3525abaa70113d7db8424839defa0cb86285f7da1c839c1821f99165078bcda7add08de3cdee08f9ca490fa4f922050b6803eed1beea1dae4ce0ff731d4004c0f998941ef22134e0a87b4d2e018d6ef3da82b62f66569def7bc42e67d5ce3b2894be9c2ef3007fb0e1727bbb2c204498a070eda8547634e5887e5f31487cebff0bf53546ebc8f58465084e5e467476ccc8fa52147f668b1b31b1b2089de459863acebce955362832b1b2ed2", 0xcf}, {&(0x7f0000000680)="d653df6f1eb9ded44d1e2cd6a79fb017b49397c564df69cd0637eae523a8c3589c0ca65f83212c6fc031a0f6db52739e018d65ff2cf477cb3d4975bd", 0x3c}], 0x4, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x20000000}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000d80)="1a6a215f8987689b478165e868352745ce0528fee5e4b147483bd824120d4a9ac1bb81157be5fb1c2a6ffc8ced6270cf7060687865610859756773536fb7154b369f1aec14da1002dd04fcf8dc617bc3a81f8f813f9dcc148410cd0f00c5b624a97c36673759ee2fa63dfa272b03257a6246a9f6651cf3b40125f4b0932f73c152b42708e5e8b9a9692353e477db36e7ec7a42d027e2", 0x96}, {&(0x7f0000000e40)="e51b640757796f2f7593bda0c1ebef2af53fde6d8540835c399e2c3d13dfa5112d221ce830c99505feb5f1f46f1d6a2919d08dd98d21a4a7a2e049de0fe6c003a3f6a14becb8c6fe04ebfb5d4e358afb89cb37ddac83e30818e81fd38cf22ee3d730d4de9248cb42358cc6", 0x6b}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="d01b8789356fc20cce49570cdb32fd648694f72de751ac59569ef68c64b0ddc1e6f06c86a728822c3a0ac314a6ec156df599498c4b1e3801327e6ab94d1245ba6e13daf15f54f4bd6505605f2d9432534cbc8aa53b6adecdd6500809e7b92441cabc187922867dc4b1c01aa52f265aad6daf6fa40ba55f6267c22c7b1efc95f4c06cefc38e5e0e2079e7dfc7d4bcf2a09cebcd74335c416348ec10ce2c69edf5aa252a62f09be3f2be0cefd39c371cc56fa81791f66eef5124f014a13c70c7a709fb", 0xc2}], 0x4, &(0x7f0000002080)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x24000000}}, {{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000034c0)=[{&(0x7f00000021c0)="a641db7db31a8e765d36957a07afe8699ecd49abbbb7b66fb98d838e574d9cdf1a90a80d9d3e0677e1bd4772016640af2c1bb17906637d14ce01df75411e21457fd29b2e6fa5783d59a898fb13e63e795586063e399ba5d31c7b9f9be672d7857a24b05c8cd13f7add0904ee4c4178916288af8dbb6b", 0x76}, {&(0x7f0000002240)="cb64faa66f1d7d56b06b12abb835423feb9641251e2383f2baac6d9bf92a5851243ef34a7c4dd260fbccb3dca98f29bcfef9bf99c023c54e4801339aff1489506b3039ce5be85e385e6cd2cb8d2bd4e4c3c711abc59286a06493591ee1fde6d918e3a998662562ff656cfd981de687b1f225", 0x72}, {&(0x7f00000022c0)="172b9bcd7dacd8ecc693d2dabfe122adffd9a52a266d967006d5607339b67623b4d5fc55df", 0x25}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="88102ecf121e6350ccbf647a32a3e24187c4b9edcd2d83a091edb028d1af59f50dcd6e12deaa379119059b84c323628db52f7c09ec8bab038fc60270e21601c4d55f6ea46c0053ef55d62429741083faddf07e28d0cb11b7047ca8e96287988cec66e4acbf", 0x65}, {&(0x7f0000003380)="0254618bbd9673657cfe1cb636761bf1f2661484a0c6664ea402861ba6d7a03d3bf82a84c079686fde3d647c96f35306f9cc13da67ba18ed6ca20cbc84bb4ba085162ef7d522e0d95eebbc78bf68ec47fa785ba974c8478a145d7d1c317b186f861e1f1ffc86100474fdcdf752d2a89e06f4d2f5d4f2801f64378d2066e2fe373f5182d2b2631b64e27298cfe78faa3a0a39da4a6d663d85b3d3dc2ff362956c0f37f156", 0xa4}, {&(0x7f0000003440)="a6de", 0x2}, {&(0x7f0000003480)="412f9636b0f6591e67470e8c5b83d89dc35ce7c8d8cd0c9ac93e2fd854", 0x1d}], 0x8, 0x0, 0x0, 0x20010015}}, {{&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f00000035c0)="60d75c2a33b47b7e876d91b234f6b4cdf44e5fa42fdb22912a192ab5f33e164ef0d1f7b73c72d29b50e7fc92e836535cabd1cd9ff72023b498f3ae3f549f79dc6e0acd0f2a4edb466c111e00fd8a9fb46581030bdeda930eabc0f4a544dc0baedb3b061ab5e183c7fb04e950ce829d41f7c3156f4036294d41e9673bf57372cd723e16637d42573f4f35e07f870475a749753cea2a11834ba67fb34f696c41f36a41423c7501033b997f23a50d03cb076cd3e5951d92d4c44f8ccecdd634da", 0xbf}, {&(0x7f0000003680)="0d19bd45284a2fa3c1e92de7cf8b7739eb74d2fecbc2effa7bfe560095404206a4f8b8e8bc625c6a18979ba7", 0x2c}, {&(0x7f00000036c0)="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", 0x1000}], 0x3, &(0x7f0000004780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x60}}, {{&(0x7f0000004800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004880)="f31e57acc8d88ab5fa6bf422aa8f9069b0bad1855e5ffb458d526dfee9cc", 0x1e}, {&(0x7f00000048c0)="062dae4572e5e3b7d37f0f931bc301b393ea21ced059472641c00217de99e71e2cba43be9cfbd5b22394de7291", 0x2d}, {&(0x7f0000004900)="b3dd0b5fdf3b8793e86df452c97b7abd20bc179b2732b55792ad0ba767f39b465e294bc8d7c9ef68c4d860469b7f62a0d85c55cf2280596973c38f74d082bed74a9f382d5312d9b1acfa06b17757e6f58f740d4a2fd308a7b72306c5e365b0d30b66a8e9d473e757dc0d6122676e29e1f6d1c600dd34e42276d8bf2a95f44167696b6ed006df17a4d5cb45bac6cf7322ad0b74dfe95d89505998b94aae5421a6e58e487f76fb7983c7a48af87de69dc87e9a788715d7ade78747251a3bf975744f7892152e68bc8e44671398f5c5c74a65bc7953c1", 0xd5}, {&(0x7f0000004a00)="8b5f75d353048b78762b3506a2ef8badcaa80a63e05a46385e2f1d836d0d26ff1e60a59720d3a0609ec6c7dd15ab22e54a5aba6bfa0a2e446bc2f2350ce9d71a7b5ebfe1708d3d8fd10338c6d89598a028ff40acee83454404ed905c8e8bc861113846be81a0b95ed158707968d503f3af1671e1abf09c5ecf0b66dfa4f673c8", 0x80}, {&(0x7f0000004a80)="b363fff78a4b6a9bca", 0x9}, {&(0x7f0000004ac0)="185813a829d6e83b9c08fe638bd7a861347a92dde1ae9d1877d99b19aff7b0fa4cb46d423dbd35731957b9a53c", 0x1f}, {&(0x7f0000004b00)="456f4843e65acbb2ec3ac53d3e579698edb10e81cf1b619a64c6eb027bfb9f7ae7d2735f7fe7ae4e053638be95e25e3ad2628db9a00d0f5035a8d71ff28002ccc0d01d23d031f184bd22ab790637e0e829ab8676622f15e16fdcb379d460063229b484386472ef43e74f8c60b40e6d75deef2e13894c3ec6beb84b8e9f67cba68ed96d05", 0x84}, {&(0x7f0000004bc0)="bbe815f021513051772a8779478b073dba43bd8048aaacbb4c6c2037935b70f036d82e26bb61b6d5b10a22134f245768bee61914160d743d8827888d88033e86c5503cda6b451a2b895c359041d32fdebc18476306c2fd9e47bfc663bb101c712e99c654", 0x64}, {&(0x7f0000004c40)="c610260cdad97860113df0d42e6a3c3050196d0f44e113bf7b0dbeb98fe6f84e2672303f76f9ba3e40c1416148106c12603e4f10b7d46434cc35a6ca6fd5d7efe2f657f43495c7ee119045d7fd399ccac780b0aa22", 0x55}, {&(0x7f0000004cc0)="4f76b9a017a725d197a7a28b16d7e99fa51332c8978a6364c13042c265d025b750bbc7fe2432f0cfda89f9ce3f7cb54a10b7c182c714768cbc55fd2515494e83c2b315364b60bd08245aeaf5ed06fa0fc3ae20a58f44e3aa9bd1028afd4c9a9093b6316ef287eb9a376917152a9a74b6b62995084ba9286eddd4d06ac7aa70f8f7c95dace0f12cb99723d38142f9830d6cca31122e", 0x95}], 0xa, &(0x7f0000004f80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r6, 0xffffffffffffffff, r0, r9, r12]}}], 0x80, 0x81}}], 0x6, 0x810)
socket(0x0, 0x0, 0x0)

06:41:54 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000e0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:54 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000000e0000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1229.931062][    C1] sd 0:0:1:0: tag#2118 CDB[20]: ba
06:41:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x3000)

06:41:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:54 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
munlock(&(0x7f00006d6000/0x4000)=nil, 0x4000)

[ 1230.128218][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.136450][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:55 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000100000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:55 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000100000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xffffffff00000000)

06:41:55 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x5, 0x40010, r0, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000340)=0x1, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x3ff)
r5 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f00000003c0)}, 0x1010001)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r3, &(0x7f0000000380)=0x80, &(0x7f00000003c0)=@ieee802154, 0x0, 0x0, 0x1}, 0x4)
syz_io_uring_setup(0x7a87, &(0x7f00000001c0)={0x0, 0x9b17, 0x0, 0x3, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r9=>r3, @ANYBLOB="80ffffff000000002e2f66696c65300014eb1f9ac96a186eb4f10cd06f5ec3b2bf1eab199f68d924b572d807df2dcf2cc68f0e183fac495393f4749ea49b5256"])
mmap$IORING_OFF_SQES(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x3000003, 0x80010, r9, 0x10000000)

06:41:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x5000)

[ 1230.564941][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.573181][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1230.580378][    C0] sd 0:0:1:0: tag#2125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1230.592200][    C0] sd 0:0:1:0: tag#2125 CDB: opcode=0xe5 (vendor)
[ 1230.598549][    C0] sd 0:0:1:0: tag#2125 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
06:41:55 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000b40000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1230.607622][    C0] sd 0:0:1:0: tag#2125 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1230.616673][    C0] sd 0:0:1:0: tag#2125 CDB[20]: ba
[ 1230.623630][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.631685][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1230.640762][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.648771][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:55 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000130000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1230.715924][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.724002][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1230.740442][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.744618][    C0] sd 0:0:1:0: tag#2129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1230.748881][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x7700)

[ 1230.758738][    C0] sd 0:0:1:0: tag#2129 CDB: opcode=0xe5 (vendor)
[ 1230.758776][    C0] sd 0:0:1:0: tag#2129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1230.781568][    C0] sd 0:0:1:0: tag#2129 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1230.790613][    C0] sd 0:0:1:0: tag#2129 CDB[20]: ba
06:41:55 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000b50000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1230.907472][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.915534][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:55 executing program 2:
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1230.961052][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1230.969103][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:55 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x2000008, 0x10, r0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x4, 0x2010, r0, 0x10000000)
r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x9)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000feb000/0x3000)=nil, 0x3000, 0x15, 0x1, {0x0, r9}}, 0x80000000)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r10 = socket(0x0, 0x0, 0x0)
getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

06:41:55 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000900", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x300000)

06:41:55 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000140000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1231.100524][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.108905][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1231.194119][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.202338][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1231.231530][    C0] sd 0:0:1:0: tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1231.241449][    C0] sd 0:0:1:0: tag#2135 CDB: opcode=0xe5 (vendor)
[ 1231.247941][    C0] sd 0:0:1:0: tag#2135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1231.257099][    C0] sd 0:0:1:0: tag#2135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1231.266142][    C0] sd 0:0:1:0: tag#2135 CDB[20]: ba
[ 1231.280633][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.288851][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0xffffffffffffffff)

06:41:56 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000d00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:56 executing program 2:
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:56 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index, 0x8000, 0x0, 0xaa8, 0x4, 0x1}, 0x80000000)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:56 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x307200)

06:41:56 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000900", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1231.504352][    C0] sd 0:0:1:0: tag#2137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1231.514225][    C0] sd 0:0:1:0: tag#2137 CDB: opcode=0xe5 (vendor)
[ 1231.520582][    C0] sd 0:0:1:0: tag#2137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1231.529624][    C0] sd 0:0:1:0: tag#2137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1231.538674][    C0] sd 0:0:1:0: tag#2137 CDB[20]: ba
06:41:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x2, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x1, @perf_config_ext={0x66, 0x3}, 0x421c1, 0x8001, 0x0, 0x3, 0xa7d5, 0x6, 0xd7, 0x0, 0x8, 0x0, 0xfe}, r0, 0xc, 0xffffffffffffffff, 0x1)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x1000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1231.549117][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.557517][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1231.575410][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.584500][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:56 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000d00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1231.665470][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.673776][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:56 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000e00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1231.739083][    C1] sd 0:0:1:0: tag#2141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1231.748969][    C1] sd 0:0:1:0: tag#2141 CDB: opcode=0xe5 (vendor)
[ 1231.755350][    C1] sd 0:0:1:0: tag#2141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1231.764500][    C1] sd 0:0:1:0: tag#2141 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1231.773563][    C1] sd 0:0:1:0: tag#2141 CDB[20]: ba
06:41:56 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x500000)

06:41:56 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000e00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1231.894190][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.902389][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1231.909876][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1231.917895][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:56 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000004000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1232.019728][    C1] sd 0:0:1:0: tag#2144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1232.029749][    C1] sd 0:0:1:0: tag#2144 CDB: opcode=0xe5 (vendor)
[ 1232.036303][    C1] sd 0:0:1:0: tag#2144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1232.045436][    C1] sd 0:0:1:0: tag#2144 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1232.054496][    C1] sd 0:0:1:0: tag#2144 CDB[20]: ba
[ 1232.059658][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:56 executing program 4:
r0 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000004d40)=r1, 0x1)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040))
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r5 = syz_io_uring_setup(0x3036, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4}, 0xff)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
syz_io_uring_setup(0x187, &(0x7f0000000180), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r8, r7, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x1)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r5, 0x3f79, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1232.068221][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:56 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1232.316121][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.324264][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.331802][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.339926][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.347447][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.355452][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.362962][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.370972][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:57 executing program 2:
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x723000)

06:41:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b500", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpgid(0x0)
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x6, 0x44, 0x1, 0x8000fff, 0x741, 0x2000000000008, 0x7f, 0x2, 0xfffffffc}, 0x0)
r1 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x13a04, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
setrlimit(0xd, &(0x7f0000000040)={0xff, 0x7451})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
sched_setattr(r1, &(0x7f0000000080)={0x38, 0x1, 0x48, 0x2, 0xfffffffc, 0x5, 0x7ff, 0xbd4, 0x8}, 0x0)
r5 = syz_io_uring_setup(0x2327, &(0x7f0000004c40)={0x0, 0x45bd, 0x8, 0x100, 0x2, 0x0, r2}, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000004d40)=r6, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff)
syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=0x80, &(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x0, 0x80800}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0)

06:41:57 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001300", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1232.550249][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.558583][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.566204][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.574434][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000002", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1232.604611][    C0] sd 0:0:1:0: tag#2154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1232.614621][    C0] sd 0:0:1:0: tag#2154 CDB: opcode=0xe5 (vendor)
[ 1232.620972][    C0] sd 0:0:1:0: tag#2154 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1232.629993][    C0] sd 0:0:1:0: tag#2154 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1232.639050][    C0] sd 0:0:1:0: tag#2154 CDB[20]: ba
[ 1232.642503][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:41:57 executing program 2:
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000010", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1232.652311][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.659819][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.667831][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.678652][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.686699][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:57 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:57 executing program 4:
r0 = syz_io_uring_setup(0x7d21, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x2, 0x3c0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000634000/0x3000)=nil, 0x3000, 0x2000003, 0x80010, r0, 0x8000000)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={r4, r5+60000000}, 0x1, 0x1}, 0x7)

06:41:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x1000000)

[ 1232.735645][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.743685][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.753582][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.761603][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1232.786062][    C0] sd 0:0:1:0: tag#2158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1232.795929][    C0] sd 0:0:1:0: tag#2158 CDB: opcode=0xe5 (vendor)
[ 1232.802312][    C0] sd 0:0:1:0: tag#2158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1232.811346][    C0] sd 0:0:1:0: tag#2158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1232.818685][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.820382][    C0] sd 0:0:1:0: tag#2158 CDB[20]: ba
06:41:57 executing program 2:
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1232.833776][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.851233][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.859289][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:57 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000004000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1232.890233][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.898294][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1232.946064][    C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1232.956082][    C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor)
[ 1232.962434][    C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1232.971480][    C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1232.980626][    C0] sd 0:0:1:0: tag#2162 CDB[20]: ba
[ 1232.988205][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1232.996477][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1233.004434][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.012609][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1233.034030][T22686] sg_write: 33 callbacks suppressed
[ 1233.034042][T22686] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.034042][T22686]    program syz-executor.5 not setting count and/or reply_len properly
[ 1233.056787][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.064817][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0)
r7 = dup2(r5, r0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000480)={0x7f, {{0xa, 0x4e21, 0x7f, @mcast1, 0x101}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8}}}, 0x108)

06:41:58 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x2000000)

06:41:58 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000002", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:58 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1233.454648][    C0] sd 0:0:1:0: tag#2166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1233.464530][    C0] sd 0:0:1:0: tag#2166 CDB: opcode=0xe5 (vendor)
[ 1233.473184][    C0] sd 0:0:1:0: tag#2166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1233.482234][    C0] sd 0:0:1:0: tag#2166 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1233.482346][T29914] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.482346][T29914]    program syz-executor.5 not setting count and/or reply_len properly
[ 1233.491299][    C0] sd 0:0:1:0: tag#2166 CDB[20]: ba
[ 1233.515178][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.523455][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1233.544690][T29845] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.544690][T29845]    program syz-executor.1 not setting count and/or reply_len properly
[ 1233.562466][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.571116][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x4000000)

06:41:58 executing program 3:
r0 = getpid()
prlimit64(r0, 0x6, &(0x7f0000000040)={0x9, 0x8d}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x1fd, 0xd9f, 0x0)
rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0)
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff58, 0x1, 0x1000000)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x6e6, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f000021b000/0x3000)=nil, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r3}, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, <r6=>0x0})
r7 = dup(r2)
openat2(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2000, 0x100, 0x13}, 0x18)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=r6)
io_uring_enter(r3, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
socket(0x10, 0x3, 0x0)

06:41:58 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x11, 0x4, 0x3)

06:41:58 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:58 executing program 2:
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x6000000)

06:41:58 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000010", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1233.737122][T31880] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.737122][T31880]    program syz-executor.5 not setting count and/or reply_len properly
[ 1233.755863][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.764140][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1233.803893][T32125] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.803893][T32125]    program syz-executor.1 not setting count and/or reply_len properly
[ 1233.832485][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.840524][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:58 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x110, r0, 0x0)
r4 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000004d40)=r5, 0x1)
syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r5, 0x0, &(0x7f0000000040)="88bf768dc147f218a0729f8cdabe70393b05316d2e772dfe4362997c25aac4eb9a372a760f68a4f8c4fe401ed64ea3d71e8b6c", 0x33, 0x20000000}, 0x10000)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x7000000)

[ 1233.897463][  T401] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1233.897463][  T401]    program syz-executor.5 not setting count and/or reply_len properly
[ 1233.921563][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1233.929581][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:58 executing program 4:
r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f0000635000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000004d40)=r4, 0x1)
getsockname(r4, &(0x7f0000000040)=@xdp, &(0x7f0000000140)=0x80)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x10000000)

06:41:58 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:58 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xf000000)

[ 1234.086260][  T875] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1234.086260][  T875]    program syz-executor.5 not setting count and/or reply_len properly
[ 1234.104652][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.112861][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1234.147520][  T875] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1234.147520][  T875]    program syz-executor.5 not setting count and/or reply_len properly
[ 1234.166127][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.174165][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x1b1c, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x9)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4007, @fd=r0, 0x50ac, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x8)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = socket(0x10, 0x3, 0x0)
splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0)

06:41:59 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:41:59 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:41:59 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x77000000)

06:41:59 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
io_uring_enter(r6, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x30000000000000)

[ 1234.390487][ T2915] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1234.390487][ T2915]    program syz-executor.1 not setting count and/or reply_len properly
[ 1234.407300][ T2917] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1234.407300][ T2917]    program syz-executor.5 not setting count and/or reply_len properly
[ 1234.418838][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.433250][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:59 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1234.479745][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.487785][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1234.495313][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.503416][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:59 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:41:59 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f0000000040), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:41:59 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1234.577063][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.585170][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1234.611016][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.619244][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:41:59 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1234.651641][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.659674][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1234.699773][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.707838][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1234.715349][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1234.723479][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x2)
sendfile(r0, r3, &(0x7f0000000080)=0xffffffff, 0x1000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:42:00 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:00 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
io_uring_enter(r3, 0x369c, 0x3896, 0x3, &(0x7f0000000080)={[0x100000000]}, 0x8)
socket(0x0, 0x0, 0x0)

06:42:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1235.323522][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.331747][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.339324][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.347524][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:00 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x30720000000000)

06:42:00 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x4, 0x2db}, &(0x7f0000631000/0x5000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140))
r2 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000)
io_uring_enter(r2, 0x636f, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3266, &(0x7f00000001c0)={0x0, 0x9cdd, 0x2, 0x0, 0x1f9, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x63d5, 0x5, 0x0, {0x0, 0x0, r2}}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000100))

[ 1235.603753][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.611803][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.619300][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.627342][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.636760][    C0] scsi_io_completion_action: 5 callbacks suppressed
[ 1235.636787][    C0] sd 0:0:1:0: tag#2131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1235.653229][    C0] sd 0:0:1:0: tag#2131 CDB: opcode=0xe5 (vendor)
[ 1235.659658][    C0] sd 0:0:1:0: tag#2131 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1235.668910][    C0] sd 0:0:1:0: tag#2131 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1235.677965][    C0] sd 0:0:1:0: tag#2131 CDB[20]: ba
[ 1235.686635][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.695045][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.715981][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.724445][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.856581][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.864890][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1235.904984][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1235.913244][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:00 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000afefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:00 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000007fffef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd=r3, 0x8, &(0x7f0000000280)=[{&(0x7f0000000040)="1ca7f6be9a5b173a906c22e2503ad11845d950ab7c1ab1d4e6e448c8fa405b50eb48d8e01593a5a0d4218d2b0e30cbfbb326613846d86bea97b7923ff811930c6a6a03997e96ff733901ed7fd649c64405577554fb409c56207a34d31b1d2fb8674600"/112, 0x70}, {&(0x7f0000000180)="534e14a097706fbb18d135f28d1c53f28c1eac0ee00a78dd51b04b869a6b772d91c8cb4e9147a5049e056f3717d377e8a3ab050eefc458f8eefef19fb3667abe68b3d8a84ab70f58700020b72023830099e177fcf05dfff69c9b3dba322957b558bea036fa9bed079aae5e4fe5c01b767fb280ed98466f75d9e65ddc891f8b842773ec6b3213bb9a733b36a1eaaedcf0e06e5a02e868c5ece3158b5ce88d8e3d07d47330bceae748369183a31c52428d4bed4538af237c7a89c4bc4566cf2a76af7fc1baaeb525ea84b326daa4300ca2eb72eb50b1744ffe8d17fff0178db6c72b1ca7f6", 0xe4}], 0x2, 0x18, 0x0, {0x1, r2}}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0)

06:42:00 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:00 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1236.270537][    C1] sd 0:0:1:0: tag#2136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1236.280412][    C1] sd 0:0:1:0: tag#2136 CDB: opcode=0xe5 (vendor)
[ 1236.286770][    C1] sd 0:0:1:0: tag#2136 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1236.295825][    C1] sd 0:0:1:0: tag#2136 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1236.304908][    C1] sd 0:0:1:0: tag#2136 CDB[20]: ba
06:42:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1236.323115][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.331145][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.338891][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.346912][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.354420][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.362439][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.402580][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.410730][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.427592][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.436569][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:01 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x50000000000000)

06:42:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:01 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_setup(0x3801, &(0x7f0000000040)={0x0, 0x44b8, 0x4, 0x1, 0x2ea, 0x0, r0}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x66}, 0x340)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:01 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1236.612738][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.620989][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.644996][    C0] sd 0:0:1:0: tag#2143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1236.645961][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:42:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1236.654853][    C0] sd 0:0:1:0: tag#2143 CDB: opcode=0xe5 (vendor)
[ 1236.654871][    C0] sd 0:0:1:0: tag#2143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1236.662898][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.669295][    C0] sd 0:0:1:0: tag#2143 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1236.694957][    C0] sd 0:0:1:0: tag#2143 CDB[20]: ba
[ 1236.765064][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.773285][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1236.821094][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1236.829162][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:01 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3f, 0x505801)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x64040804)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:42:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:01 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000ffffef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:01 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r7 = syz_io_uring_setup(0x1844, &(0x7f0000000040)={0x0, 0xf610, 0x0, 0x0, 0x1a4, 0x0, r0}, &(0x7f0000634000/0x1000)=nil, &(0x7f0000633000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="3f0a800f3cc1d2b412cc1ed66b1b1c733d197b1cb91ba67de5f25310b434a5cf6f5d3bd7777e79c72c75fe018bce3232d8f3faec88341bccec10bfa2682cfdfb512edecb226a3a86c4baf9e9978eb4d417c9b9e5c03efeb2144b1432186fdc8836238ddd5b361c803bb8af13edb99bf220abe29ce99d", 0x76, 0x20049804}, 0x863)
fallocate(r7, 0x52, 0x10000000000, 0x80000000)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200, &(0x7f00000003c0))
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1237.113726][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1237.121791][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1237.134900][    C1] sd 0:0:1:0: tag#2148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1237.144933][    C1] sd 0:0:1:0: tag#2148 CDB: opcode=0xe5 (vendor)
[ 1237.151289][    C1] sd 0:0:1:0: tag#2148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1237.160506][    C1] sd 0:0:1:0: tag#2148 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1237.169559][    C1] sd 0:0:1:0: tag#2148 CDB[20]: ba
06:42:02 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1237.316847][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1237.325070][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1237.332584][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1237.340604][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1237.348171][    C1] sd 0:0:1:0: tag#2151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1237.358264][    C1] sd 0:0:1:0: tag#2151 CDB: opcode=0xe5 (vendor)
[ 1237.364613][    C1] sd 0:0:1:0: tag#2151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1237.373658][    C1] sd 0:0:1:0: tag#2151 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1237.382708][    C1] sd 0:0:1:0: tag#2151 CDB[20]: ba
06:42:02 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x100000000000000)

06:42:02 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x4, 0x30, r0, 0x10000000)
syz_io_uring_setup(0x6500, &(0x7f0000000140)={0x0, 0xa200, 0x8, 0x1, 0x3ce, 0x0, r0}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f00000015c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0x3, 0x5, &(0x7f0000001540)=[{&(0x7f0000000200)="2e8bf4ca0f68c8ae452d3c6df5337eed1c0ff28c421fe20a46db887ab543d457bd5958ad72e73ffee2ced1a178559681ee9f1c2ef7b080a3b5cca5e3ae6bb0df0635b470879055789215472f3e9f6585898d94c04a1229a0908f4e86308a21d4ec7ad4a84f886db4cf4da3c9fabe5c69d13466b46287d4c780a542dbb46960fcf633f48c8ab5a26c1c", 0x89}, {&(0x7f0000000340)="4179cb62eb22b23543402062dc784eee77b7d6822ea171aa6852e08ec561f4c7a347d582780d4ec4bfd664270f4b0163f76a55656e03f229e2e5d8453f180b1056570e894a9ceed118113b0a200151a5b02ddf688d4d42eb21ec1435c28fc09a0358291007130891fb2c128df02ad22dfff87055182606dc3ffd056dad66c401df56183a5550f52e50d423c298dcbbf1410cfc38d2dd4df13f576af63c5f4a6402ec6762351990752daea0ee11d0886c949900791ed83d1a26e3baa466d8b092ea625e282c367e5a75a23707c3f9d6fa893c9d2e7204938b8f6abdab143eb042eed8ccd80c2f0693ce", 0xe9}, {&(0x7f0000000440)="8b834f033d0cfe54b0255f5bbd", 0xd}, {&(0x7f0000000480)="b5aa7fcf3a9fdc1032c2db63dc0a71bbab313d5d7e10fab9ea37ba3f1c9e5d798354a181598feabd3955ddea5b22f8661fd6c68b203e17ab112db8441f07faa89b1fb8f7d429ae462f8cf2769a0d9210f7a7a85775357d08694bec947dbf8dab0a6409b201822a369fd1af36403deecd5fe0d4ea23ce14de5840263c60e834b107725f4e0b28cf8dcf878bfb66301d31251947dc05e892796655b4f49e3c1eb9f72119acb72e7e905f178154132109458231933330d71c02eb4c4d9012bd9d3ef10b9da7eaefc59e4adf4b4e0fd3edb93b6abdb57d45ec8db320018dc23d507d350067cb2d0829ba3d6590d6ab727404879db86585c330893164dd797b0de0e2dc5c25c759d38eedf4cd53560c3eb3a9ed5a8d2d3aeb7fe246e63362f3328203d0f3607bfde49584477ff80551463eee09d2dad10c7a64d6370dfe2c73c9d6c8b4c39fc14a7da8e9e078e21accf4ce7a4eddfb6c603526a47924187d2c3d7aae2e9590ead14198692a1b8130d59d216a2359538069d80559d7117c178821ccb32e54a87731f9508ceca705e513c41044fc08d656b9618d3d91c1b06de13e765c49312a9e331371dd155427cd06d9463fbb49c6c9d996960bdea203a2402757cbd443cc968c5ae82316f4de49bd254b8e69c3399ca05a45ddc450bc8b4b14419b20006b9d0c967f42dea84e5161e500e85af1f1a9d72a40fc988a57d02d1668b063d102ba52ed2565a2c1da0b271bfbf2b364c9b9615a4cadc531e87939c7e219829ded77909913ab18c441a8052b3a46fda6edeab89a120888db0b876f0ff2532cb914c9aad95370063ea1cc0e72d7614b03c7dcce49d2590f3fd3a029c1158424cdad350c3c4658675587f4879df825e06cf20ffacbfa82a1e55b9dce3317a5bec5daad1053953eafb5fbd7398088ec8af5dfc9b649a462b9a4ec24ed0d6dab63b5ffab7f67a7bdc984384a7b734f6d04f1889fd3b01bda2802e9a58c938551a4c4fbc84c04cc35dd8dd843e02ff4b7aca82eef64a03941633c303e32f1d65200c81244c46fe81565504c23bb684566b467dc70869e0fe697939dec8e809ff70a739da8d755bb9f1419de6af1365bebe2f60532926eef11b2f052ecc8c55aedfe500cb4a926f8978c1080f74d27801e8340536abd7c26c7cb1a5204e655a86f4765711af2e2554f6e19b1b6f9e31379f0e41f9a8cda6284d5e3b81cd9ef54b4be71ca20b05d36c6266296e0dedc6a03deb2fbe7218b1e8c3f9ab87b270aa1c81840e7eff3904f420199eaade40c2120779996e728752acd4cade26ea110493caf2ab62a465e3385da9cbeb819bb87bb895e215fe1a60c21e2e1016487f5227e0295db5ae06c1a46f6a933bf42aefea9aaf74564a0515ea44659a56064ade2220b54205fe8b52d25e8692244034235d35ad71fcba552ac7ad615be2e6231c58f97de060f84f77b243bbf60a3c6d4bf5a41d03d773e6d61994117bc1f9149022f2fae8c928d7b91060590390f111453c4b037edac0fee04bde7499ccb0b8ec2a11eefde5f003dbe04701a6cb4eae63e0361380e494532deeddac5e9decc6294764bf29f7187b2400545afeedf37d5e10718882a2c7afd0afbf80edccfa7c0f6eda0cc298b80353637518043bda661519f6e052b9f8a0599d81d0c215abcd65f4eda8c6241c07be5300ced79f1e07872943f7607847319b742c5ae3ce8792f40ac8936942d9c27fe73776ad68902801a02eaf5a4d625dbeebb2b514702f35a53bd6e85a455b836900d594131dfe1ed996d17eb1dd6a88d17e6c9d48d0f5170ed99885a839f324d1076fe0f6039a1b19fca80207ed9c09fd2a4272464ed374b25641f3c99897b0ba33f271a5b9d4e8600aed75d9ef132c6bcf54336ce6b01e766548cc37cb21cf703690e346c573451f57708fb6064fe0f2356970d07fa3489de4877fee1e69f00d2f206b92fdb14284e776d512532df77c3f2f5979bb7a491c2e058253dd4537394970c78052af727de7a2ef436e707a7fc0251a48429134fd19804e0201d82df5407f2cfc31b3ecf505032f926ee1c23ffbb13c40953e0352c31050a96b7e1a9e0dda55b8e1ac5e4321e5e841db6b9bab43e0e2fe5fd93a3483343d1e59766751df05416fe2b0f157bcb56056ccdcbe204ddbb3bb0d2ef2a294897ce166434dc12f282888ca7cbd92c76f7a9ba64453e6ff358ff73e82ec42fa25f5c7a5e46dbe6c94d5be4a79b36f5cf5b64a13adbdaafe998cc7bc04a31a90b02f8bc87a65feba45e657bd1ad37bac12bac8e2105c972da7fcc62ce89fae08c550e0ae45c7a345e16f8b0cdcef4e41f19b4751f53019a140ac3d8c12416577d26fae3b2ad717dc9822fa7adcbf855731746d24cc257317ce0a84411b8b9c8fd690c533724c6ab6c1dbd586f10515232d11329655060cd2fcddbad907dd3469c42d26baea15c28456a01a34128c23d45ba303611b5eca5d8ec812b36dabbd2d3eb880f9eebf0f206be51ec8b5fe543b6386e716f9cff4e3bfd7670bb026f635557b8462d48b01210cb352c904b62bf69bf9f53897deb1ed8a1bf7106d60b86b5ac8cd7568b43b1e65d2e89756849c619970432a03a3496111b945dd701eff3635400ba59706be8082bcaac5dade39ec1f720ce6514be46b578ec75cd429bd0431baf4bc06f153f70e9e005048028c461add3e8cb842e1e5c837be5e819f458035cb33ef12bf740c22f6560274824c52fdac4eb15786966c100519aa995314ce23693f9ee44c6c13fb04d007962ae30d1f8c9705246481d437a24b88df8ee9ac930b2f9c8662253d4e8fdb6c2b8cc4ab4ed67044b26654f1edd06b848d3eaa2966af70589844983b251f2ab225db93500c721701745e8f344aa437b00da307d4796598cf34ff107400ac191af8b53bf954f7ea76350476b26d4d5880dc67893c573565735335dc9c33430d936ea082ae439ca4291114081c015422c1c19b17c0aeb7d9c99155725eb281ac06dec7cba4a69c1cd853c7549a344db9c9b87d72c36900d85034227b1c93e059341a66e11c8ecd51390ffde0897705dc834c8b0ca24bd27322ea66af86bb76722811e0ec4b468feed19cbdae0d88eaa25aa58f230c827974b9275630ec4277c2348e050f3788fc5b5feb7b6a1410b131b8a73433b86e003aecccc7ba7343b2bf18682dd0eb47ea6d14dc901375e97c1bfdbd9104970aed01ab1bca42fd14d85b38440295eb9dc3c43c8e1b5c5635b960364dc26b79f0c1a5895def155100103b28b522d624e5ac0bfdc541d21d41bb8510f82d1ef0268ba2c48bf798dd6287816b0cf03bd4ef6aa670c21d936b6455f66b4f2bddc156d49692e810346401102ce8b015d67b5795ced39996493236199d5c3dc4fd21203b0ee16364e8514d8706ce8fe4740ebd6e39603ef60ff5388af0c6a4d2c23be54c42c9fd4b1c466c6f9d3317d8fca6228f0c76c633d7c1300153f2371127218b523585e85b3e30ca33a07d28ef7b327e9f6fd6051bb1987b09c4965e4b1930f27da862414f6268b2111179cb337a4e85ac9cf32fbead72baf20130b7bdbe16b67bc97fc440ac366c3f8e807ff9e3f24359ae6921b22652f23e82e48b68d0b954dd52b888ea3f575b05c0f66120df8af687d6d9fddfb34d034ba91ab7aecf69300548925ffa8f109d2d27b0adbcc85dc6a6c0552ad0f976adce1c1e99b72992845fb33ec55a48b87a8f182c46d28bda337de60ae177447f0848d02a9bc7fa4fe0e05503d2ba0a49ee4f24860169be52190aa133e5ea2755ae9617e3260920cb3422d18ca61b824338361e6f77378115d8997553de05671daa9f316ede2f99ab5dfc589ddc48829a42dc0822ba02c5cdcda83a994d3ce5727e740d68fa9ba2e43346ef93f870285578c44deefd3f57980e53b6b85031d8e97e8ea45df4c7e5b610f8df8769df4568e93d1a2311a3f90496954d663d724e35211e9a241f9306767bc812c5bf629e78cac46310f99a9059b5a02d4e23e30e40088cce682a94d93d9b3164a391a85306ffb2641138889a17539d2a15327370689ca91ad541a253d34ac841ec2f6dce1e4ef8f650212fa2c766589c315a21b08e61dac555eeb25c7cabe90733e9f6c8449f4371854d71eceffbfcde1a45a4c75c0563502ca32059e4ddcbdf3d3b7eb789dd300124e361ee0035daa3a3aa3976f6a93ea16d8b44f8e7fa7f2c5d741269783dc787e184a4aaf1312ccfe224157ac8a3d03835e7a723e5f8cc899dfe359e330985328d5d6e9a60527cb71e8a087550d0698ae2c1cf7b4cd4511db4037c7835491bc1cc36e17e08452d7f95bb3190757a3d2f513438c58456dc1b25c17ba31868c18bc3139ad58505db9e17d1710b19829f5ab15c02cb92c75e027e8d965bb06129f6999b94d36eea282494524f2b1df900e31bcef6af40831d1cfe55dea9dc981b398adf35a4973ce93173ae55c0c04cd1ed81b8f1e8f794c901152b89790b9422d13686be3d530472b30513ad43cb90385e39341cdb1ce5448f3e14c4c554792d13fdd97b7e208bae210a0e24f55547e94eaadc0d04625fe91968fdf2f1f185b15ae840172f2c65d07a1dd4c89171c10df213a97ef49bd18630929c3e6f6907d85639afa6093ce0a9f07f78258b3cc9116868867e39de9323f96d3a1c4bbd96fec8f22a42e553d659b4fbb97a8a12c48a7a9febd08cdc049dbb5bee4ddbd351825fd953fa06832c91656862b6ee118c663a765ec68f18dbe57f869809c673ddc07e57f0b39ac9e68e1662a0567fda3f0587fb61715af457b9bf9e6397b8044b033404bfc7fb35e5d0834a60a403cafb324f492de5ac106f5faee0e63cce8b84bfe2d71c594b9e97c207250829c98198629afbcb6febd884691654bd66a4337df44996c1ce243eba1f59b1a1852d520d940265a02d5ec8f8cd8a4067dc33345e4e496fca8ec46abafc1a638aae7153dc5b1739aa9c83cb056d1464149d0d30b542933f85966ef088bfa07647539a64cc57f5095a098ae708cfd72bfe2faf686cda364bca747e6fb936c7a3a6a102e4ec386c5447133aefc302b7290e12f2b7ea5c6bff4496c1ce08d47fef7159067fb389b8478087efff5fb63f639df0e9e796cee387e4f936d1858303f98f1d5aa6dd68b340277bf07f1af43229df289bc8e600c1beecdf89a011d74f7ad0041d22416a64683d854c5211f10644c613bc6c9c76f552e4036aa1fbfd778061e156411adf613ed9d7ec12fcaa3084cb53da2aab9efc2680aeced600b8fd78a3d8849d446110188d610eb75bd70dbf904b61c57d372ee1ab44c49ba22a412896389c70163bcff251b3766923cc0145ecf3ba1586ad819de7e7ef884dc87228115868ad69137bc75c60b3443517edc54b0cb81391e055de84d82a168529c9e550e384f741bb751248ced6de58c29fc59698a298a64720ac6b663f90c03d108be19f94b3c5dc70157e3922a35439671c2dd0c21e5809b367fd99c4d0a94025a789192db3090f277a061ed7c9f58ee03e15dacaf1a5a66add830ccfd6c8cffffb94693b60435090bd9f79ab9e3ddd232db8abd76ea4a143c862341878e3875968fba43548d2c6fd5419631c36976b840f8a28653411993761e274a1d2a1131ce0eb3b2e1930239a6da7eb93268fb04761105beccfa07865cfd088a6e487df117e5394165cf7bc804cc7576523eb510b276564b4212ff902ec5bad521e2b3af1196fb675527811995cfdd3b073f1641d2f9eb59be6a1b2aa4d95809f7d638ed99f4a785eb5a7a456060bd39122e", 0x1000}, {&(0x7f0000001480)="1c18427e3359b1b4f911d3991ca73262a7417fc8ee3bd70cb38ef31450dd4a12528fec05a06691bf5abdd29bb5304bfbe6fc8458e665d131d617870cd90807c13d728819a8d3f4ae1fe748e80f0cd2296ef28cfb73a01faa1e0bdfc82d97ff8fe1e972115bcbf5fe5445137b462bdbca486cf2b9af86cf8d4405233682f22eaf759e59bcc07c65ed25d404491b99b65132ce4df429cc4d95edde2e3ccd6d33cec09870", 0xa3}], 0x5, 0x20}, 0x604a)
syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x5}, 0xa3c5)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:02 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000ffefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:02 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1237.638985][    C1] sd 0:0:1:0: tag#2152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1237.648944][    C1] sd 0:0:1:0: tag#2152 CDB: opcode=0xe5 (vendor)
[ 1237.655378][    C1] sd 0:0:1:0: tag#2152 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1237.664414][    C1] sd 0:0:1:0: tag#2152 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1237.673486][    C1] sd 0:0:1:0: tag#2152 CDB[20]: ba
06:42:02 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
io_uring_enter(r6, 0x636f, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0))
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x63c7, &(0x7f0000000180)={0x0, 0xda92, 0x20, 0x2, 0x137, 0x0, r3})
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2004, @fd_index=0x8, 0x9, &(0x7f0000000040)=""/67, 0x43, 0x4, 0x1}, 0x100)
socket(0x0, 0x0, 0x0)

06:42:02 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000007fffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1237.875333][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1237.883388][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1237.890896][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1237.898879][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:02 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x2}, {0x1, 0x9}]}, 0x14, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x5)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:02 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1238.042636][T20413] sg_write: 29 callbacks suppressed
[ 1238.042664][T20413] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.042664][T20413]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.099597][    C0] sd 0:0:1:0: tag#2157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1238.109474][    C0] sd 0:0:1:0: tag#2157 CDB: opcode=0xe5 (vendor)
[ 1238.115831][    C0] sd 0:0:1:0: tag#2157 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1238.116773][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.124876][    C0] sd 0:0:1:0: tag#2157 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1238.132861][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:02 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000f5ffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1238.141869][    C0] sd 0:0:1:0: tag#2157 CDB[20]: ba
[ 1238.143029][T20421] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.143029][T20421]    program syz-executor.1 not setting count and/or reply_len properly
[ 1238.149359][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.149380][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1238.209771][T21138] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.209771][T21138]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.210875][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.235470][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.249150][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.257177][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.277457][T21138] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.277457][T21138]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.294993][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.303039][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:03 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x200000000000000)

06:42:03 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, &(0x7f0000000040)=0x800, 0x0, 0x4)
r7 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000004d40)=r8, 0x1)
recvmsg$unix(r8, &(0x7f0000000400)={&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000080)=""/12, 0xc}], 0x2}, 0x102)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:03 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000fbffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:03 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000afefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1238.585004][    C1] sd 0:0:1:0: tag#2161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1238.592462][T22634] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.592462][T22634]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.594946][    C1] sd 0:0:1:0: tag#2161 CDB: opcode=0xe5 (vendor)
[ 1238.594975][    C1] sd 0:0:1:0: tag#2161 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1238.594994][    C1] sd 0:0:1:0: tag#2161 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1238.595018][    C1] sd 0:0:1:0: tag#2161 CDB[20]: ba
[ 1238.597579][T22631] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.597579][T22631]    program syz-executor.1 not setting count and/or reply_len properly
[ 1238.660039][T22647] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.660039][T22647]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.672797][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:42:03 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1238.685339][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.692835][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.700841][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.709119][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.717150][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.745060][T22930] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.745060][T22930]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.763434][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.771573][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1238.777671][T22930] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1238.777671][T22930]    program syz-executor.5 not setting count and/or reply_len properly
[ 1238.796696][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1238.804805][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:03 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:03 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000004d40)=r4, 0x1)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @multicast1}, 0xc)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x9, 0x0, 0x7f, 0x0, 0x1, {0x0, r5}}, 0x6)
socket(0x0, 0x0, 0x0)

06:42:03 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000007fffef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1239.017205][T26746] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1239.017205][T26746]    program syz-executor.5 not setting count and/or reply_len properly
[ 1239.035711][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.044026][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1239.055076][    C0] sd 0:0:1:0: tag#2168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1239.064968][    C0] sd 0:0:1:0: tag#2168 CDB: opcode=0xe5 (vendor)
[ 1239.071328][    C0] sd 0:0:1:0: tag#2168 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1239.080353][    C0] sd 0:0:1:0: tag#2168 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1239.089399][    C0] sd 0:0:1:0: tag#2168 CDB[20]: ba
[ 1239.097379][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.105484][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:03 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1239.156076][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.164257][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1239.177417][    C0] sd 0:0:1:0: tag#2171 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1239.187269][    C0] sd 0:0:1:0: tag#2171 CDB: opcode=0xe5 (vendor)
[ 1239.193614][    C0] sd 0:0:1:0: tag#2171 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
06:42:03 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xe216}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000635000/0x2000)=nil, 0x2000, 0x11, 0x1}, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0xff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'})

[ 1239.202636][    C0] sd 0:0:1:0: tag#2171 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1239.211669][    C0] sd 0:0:1:0: tag#2171 CDB[20]: ba
[ 1239.218429][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.226453][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:04 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x400000000000000)

06:42:04 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:04 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:04 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000635000/0x1000)=nil, 0x1000, 0xa, 0x2010, r3, 0x10000000)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r6, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0x57}], 0x3, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0xc41}], 0x1, 0x0)
tkill(r6, 0x31)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
gettid()

06:42:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:04 executing program 4:
r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0)={0x0, 0x5e06, 0x1, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x2, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1239.502419][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.510587][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1239.532857][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.541016][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1239.607117][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.615146][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:04 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000ffffef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:04 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:04 executing program 4:
prctl$PR_GET_IO_FLUSHER(0x3a)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)
r5 = getpgid(0x0)
perf_event_open(0x0, r5, 0x0, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000004d40)=r7, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe0, 0x1f, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe51, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0xfffffffffffffffb, 0x8, 0x2, 0xff4f, 0x0, 0x6, 0x0, 0x4, 0x0, 0x80000001}, r5, 0xa, r7, 0xa)

[ 1239.898714][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.906925][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1239.930426][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.938575][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:04 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:04 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000ffefff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1239.966400][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1239.974438][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.024888][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.033146][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.050908][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.058961][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.102024][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.110089][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x600000000000000)

06:42:05 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000002000000000007fffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:05 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:05 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:05 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1240.437866][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.445912][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.454893][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.463008][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.470856][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.478871][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:05 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000f5ffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:05 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_io_uring_setup(0x552c, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0xffe00000)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r9 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
io_uring_enter(r9, 0x636f, 0x0, 0x0, 0x0, 0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0xa1, {0x0, r9}, 0x1ff, 0xa, 0x0, {0x0, r12, r0}}, 0x7ff)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)

[ 1240.542667][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.550907][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1240.590789][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.599119][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.627092][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.635130][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0x0, 0x0, 0xfe00])
r3 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000000c0)="a2e619f9", 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1104"], 0xfdef)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:05 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:05 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r7 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
io_uring_enter(r7, 0x636f, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x81, &(0x7f0000000040)=[r7], 0x1, 0x0, 0x1}, 0x7e)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1240.836087][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.844316][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1240.932470][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1240.940511][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x700000000000000)

06:42:06 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000fbffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:06 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1}, 0x0, 0x40010040, 0x1, {0x3}}, 0x3)
socket(0x0, 0x0, 0x0)

[ 1241.339809][    C1] scsi_io_completion_action: 5 callbacks suppressed
[ 1241.339837][    C1] sd 0:0:1:0: tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1241.356456][    C1] sd 0:0:1:0: tag#2135 CDB: opcode=0xe5 (vendor)
[ 1241.362808][    C1] sd 0:0:1:0: tag#2135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1241.371930][    C1] sd 0:0:1:0: tag#2135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1241.380958][    C1] sd 0:0:1:0: tag#2135 CDB[20]: ba
06:42:06 executing program 4:
set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0xce94)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xfb, 0x48, 0x6, 0x4, 0x0, 0x7, 0x800a, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x8050, 0xb5, 0x0, 0x7, 0x8, 0xfff, 0x40, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000080))
ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000140)={0xff7, {0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffc6f0, 0x694}})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sessionid\x00')
socket(0x0, 0x0, 0x0)

06:42:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1241.651036][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1241.659096][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1241.666593][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1241.674598][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1241.682080][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1241.690086][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1241.697569][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1241.705655][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x3d, 0x314, 0x6, 0x100000001, 0x6, 0x4, 0x2, 0x1}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0xee6, 0x0, 0x2, 0x6}, {0xfff8, 0x9, 0x1f, 0x5}, {0x80, 0x4, 0x7, 0x7ff}, {0x8000, 0x7, 0x8, 0x400}]})
r8 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
io_uring_enter(r8, 0x636f, 0x0, 0x0, 0x0, 0x0)
r11 = dup(r5)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r7, 0x7ff, {0x0, r8}, 0x10001, 0x2, 0x0, {0x0, 0x0, r11}}, 0x1)
splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:06 executing program 4:
r0 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
io_uring_enter(r0, 0x636f, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xffffffff, 0x10000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r3, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:06 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1241.868843][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1241.876992][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1241.911926][    C1] sd 0:0:1:0: tag#2141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1241.922267][    C1] sd 0:0:1:0: tag#2141 CDB: opcode=0xe5 (vendor)
[ 1241.928601][    C1] sd 0:0:1:0: tag#2141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1241.937698][    C1] sd 0:0:1:0: tag#2141 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1241.946885][    C1] sd 0:0:1:0: tag#2141 CDB[20]: ba
06:42:06 executing program 4:
r0 = syz_io_uring_setup(0x7b3f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1999, &(0x7f0000000040)={0x0, 0x8567, 0x10, 0x3, 0x96, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
socket(0x0, 0x0, 0x0)

06:42:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1242.118147][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.126185][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1242.190814][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.198848][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xf00000000000000)

06:42:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:07 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:07 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:07 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1000010, 0x11, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x3, &(0x7f00000003c0)}, 0x1010001)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000)
syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@phonet={0x23, 0x7, 0x8, 0x81}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x80000001)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1242.353236][    C1] sd 0:0:1:0: tag#2144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1242.363098][    C1] sd 0:0:1:0: tag#2144 CDB: opcode=0xe5 (vendor)
[ 1242.369427][    C1] sd 0:0:1:0: tag#2144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1242.378487][    C1] sd 0:0:1:0: tag#2144 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1242.387518][    C1] sd 0:0:1:0: tag#2144 CDB[20]: ba
06:42:07 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1242.614391][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.622426][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1242.629924][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.638028][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1242.645534][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.653623][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000004d40), 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'})
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x3, &(0x7f00000003c0)}, 0x1010001)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0x4, 0x7b, 0x80, 0x0, 0x1, 0x4000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x43d00, 0x7fff, 0x9, 0x7, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x11, r5, 0x10000000)
io_uring_enter(r5, 0x636f, 0x0, 0x0, 0x0, 0x0)
r8 = dup3(r4, r5, 0x0)
faccessat(r8, &(0x7f0000000040)='./file0\x00', 0xa)

06:42:07 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
io_uring_setup(0x6b67, &(0x7f0000000140)={0x0, 0x208a, 0x0, 0x0, 0x1a6, 0x0, r3})
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x3839, 0x36f4, 0x1, &(0x7f0000000040)={[0x6]}, 0x8)
socket(0x0, 0x0, 0x0)

06:42:07 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:07 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:07 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1242.804042][    C0] sd 0:0:1:0: tag#2151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1242.813925][    C0] sd 0:0:1:0: tag#2151 CDB: opcode=0xe5 (vendor)
[ 1242.820255][    C0] sd 0:0:1:0: tag#2151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1242.829587][    C0] sd 0:0:1:0: tag#2151 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1242.838653][    C0] sd 0:0:1:0: tag#2151 CDB[20]: ba
[ 1242.971732][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.979790][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1242.987295][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1242.995409][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.002885][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.010880][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.018388][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.026580][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.034296][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.042291][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.049764][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.057760][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x7700000000000000)

06:42:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000004d40)=r6, 0x1)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:08 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000000000003000000000000000200000009000000070000000000000004000000000000000d06000000000000000000000000000000000080000000000000000000000000823000000000000000000000000000000800000000000000f9ffffffffffffffe50500000000000000000000000000000100000000000000023a00000000000000000000005a0000007200000000000000020000000000000002000000000000000000000000000000000000000000004b00000000000000000000000000000000000010000000000000fbffffffffffffff05000000000000000000000000000000000000ff0f000000000000f36b1559748a3bf08eab000000000000000000000000005f210000000000000200000000000000d70200000000000000000000000000000000000000000000000800000000000000000000000000000400000000000000080000000000000020a939fb58000000000000000000000000000000000000000002000000000000000000000000000008000000000000000900000000000000810000000000000000000000000000000000000000000000001000000028b17b0ce455f145bc51acf389c81733196b98a6afc14bce3983f090bb0c723afd0836779e09bf98c3de99acb0aab373aa5c3d2ad4de111866cab1ea27150d6b94dc7fb433bce7436386f2f4029c20f4b1dd92b5a12903b2c2b3eef144226485599c61e643427c372d1437c68aa72f1ab7762ba987c4d3ba942d94fd6bf78135491df7f9778b41346bc35c5cfa92e7fd08d61bfa92315f53b600e8aa"])
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_io_uring_setup(0x4e0, &(0x7f0000000140)={0x0, 0xc599, 0x2, 0x2, 0x224, 0x0, r6}, &(0x7f0000633000/0x3000)=nil, &(0x7f0000633000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))

[ 1243.290384][ T1262] sg_write: 36 callbacks suppressed
[ 1243.295763][ T1262] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.295763][ T1262]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.299854][    C0] sd 0:0:1:0: tag#2155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1243.313753][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.322997][    C0] sd 0:0:1:0: tag#2155 CDB: opcode=0xe5 (vendor)
[ 1243.323014][    C0] sd 0:0:1:0: tag#2155 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1243.323032][    C0] sd 0:0:1:0: tag#2155 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1243.323049][    C0] sd 0:0:1:0: tag#2155 CDB[20]: ba
[ 1243.331121][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.341368][ T1264] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.341368][ T1264]    program syz-executor.1 not setting count and/or reply_len properly
06:42:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1243.386160][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.394189][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.405851][ T1262] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.405851][ T1262]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.423323][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.431341][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:08 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000633000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000004d40)=r4, 0x1)
getsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000000140)=""/131, &(0x7f0000000040)=0x83)

[ 1243.523993][ T2171] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.523993][ T2171]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.553082][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.561103][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.585657][    C0] sd 0:0:1:0: tag#2160 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1243.595535][    C0] sd 0:0:1:0: tag#2160 CDB: opcode=0xe5 (vendor)
[ 1243.598904][ T2171] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.598904][ T2171]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.601917][    C0] sd 0:0:1:0: tag#2160 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
06:42:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1243.601939][    C0] sd 0:0:1:0: tag#2160 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1243.619386][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.628231][    C0] sd 0:0:1:0: tag#2160 CDB[20]: ba
[ 1243.637237][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1243.749503][    C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1243.759382][    C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor)
[ 1243.765726][    C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1243.769163][ T3325] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.769163][ T3325]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.774788][    C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1243.774807][    C0] sd 0:0:1:0: tag#2162 CDB[20]: ba
[ 1243.783047][ T3327] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.783047][ T3327]    program syz-executor.1 not setting count and/or reply_len properly
[ 1243.792790][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.831953][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.847928][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.855054][ T3376] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1243.855054][ T3376]    program syz-executor.5 not setting count and/or reply_len properly
[ 1243.855928][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1243.880993][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1243.889144][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xffffffff00000000)

06:42:08 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r4 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x3, &(0x7f00000003c0)}, 0x1010001)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000)
syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x6b3)

06:42:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x10000006}, r6, 0x1, 0x0, 0x0, {0x0, r7}}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = socket(0x10, 0x3, 0x0)
splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0)

[ 1244.277551][ T3843] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1244.277551][ T3843]    program syz-executor.5 not setting count and/or reply_len properly
[ 1244.295811][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.304022][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.324253][    C0] sd 0:0:1:0: tag#2167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1244.334116][    C0] sd 0:0:1:0: tag#2167 CDB: opcode=0xe5 (vendor)
[ 1244.340705][    C0] sd 0:0:1:0: tag#2167 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1244.349748][    C0] sd 0:0:1:0: tag#2167 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1244.358832][    C0] sd 0:0:1:0: tag#2167 CDB[20]: ba
[ 1244.365501][ T3846] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
06:42:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1244.365501][ T3846]    program syz-executor.1 not setting count and/or reply_len properly
[ 1244.383642][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.391841][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1244.421567][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.429681][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1244.465858][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.474052][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.500369][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.508456][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:09 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000240)}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4000, @fd=r0, 0x101, &(0x7f0000000040)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, 0x8, 0x1}, 0xfd75)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1244.523897][    C1] sd 0:0:1:0: tag#2172 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1244.533788][    C1] sd 0:0:1:0: tag#2172 CDB: opcode=0xe5 (vendor)
[ 1244.540118][    C1] sd 0:0:1:0: tag#2172 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1244.549184][    C1] sd 0:0:1:0: tag#2172 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1244.558228][    C1] sd 0:0:1:0: tag#2172 CDB[20]: ba
06:42:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1244.618529][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.626601][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.634110][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.642151][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.649898][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.657979][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1244.669897][    C1] sd 0:0:1:0: tag#2112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1244.679758][    C1] sd 0:0:1:0: tag#2112 CDB: opcode=0xe5 (vendor)
[ 1244.686112][    C1] sd 0:0:1:0: tag#2112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1244.695157][    C1] sd 0:0:1:0: tag#2112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1244.704227][    C1] sd 0:0:1:0: tag#2112 CDB[20]: ba
[ 1244.768863][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.776898][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.784411][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.792426][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1244.799918][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1244.807923][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0xffffffffffffffff)

06:42:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:09 executing program 4:
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = syz_io_uring_setup(0x100187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1245.158254][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.166287][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.174214][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.182230][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
getrlimit(0x0, &(0x7f0000000040))
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x40, 0x3, 0xc0, 0x4, 0x3, 0x3b, 0x1, 0x2a5, 0x40, 0x25d, 0x3, 0x80, 0x38, 0x1, 0x3f, 0x20, 0x1}, [{0x5, 0x100, 0x90e, 0xff, 0x9, 0x2, 0x0, 0x6ff}, {0x6, 0x4, 0xa7, 0x0, 0x7fff, 0xfffffffffffffff7, 0x79e5, 0x800}], "cd0a85949c06f440bb1d05efc450756ae3a11a0e55", ['\x00']}, 0x1c5)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)
r6 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
io_uring_enter(r6, 0x636f, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000480)={{r6}, 0x0, 0xc, @unused=[0x4, 0x8, 0x7, 0x2], @subvolid=0x61f})
getrlimit(0x5, &(0x7f0000000080))

[ 1245.202970][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.211001][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000800", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:10 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1245.295421][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.303639][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.329407][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.337616][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0x4000000ab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x9)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r10}}, 0xf71)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:42:10 executing program 4:
r0 = syz_io_uring_setup(0x5de6, &(0x7f0000000200)={0x0, 0x9d17}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000)
io_uring_enter(r0, 0x636f, 0x0, 0x0, 0x0, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/188, 0xbc, 0x0, 0x8})
r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r3, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:10 executing program 3:
r0 = fork()
prlimit64(r0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
setrlimit(0x4, &(0x7f0000000040)={0x1000, 0x8})
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r4=>0x0)
ptrace$setregs(0xd, r4, 0x40, &(0x7f0000000200)="7f8b58cb787257174249fa2826baec11e7272db964cdc7424785c20281696638dab0869c0b9ae68b7e013bd9d6df7ca99b62c410e6f2839b6e12b42c2a9f5641070a810fd0ae67a39594335f1287e5551bc201cc377994e3c61fdb2fc3db2a52a362f99b2f52f3c3e7463edfa1cdbd341c17")
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000635000/0x1000)=nil, 0x1000, 0xc1d35e4586a89051, 0x50, r1, 0x10000000)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r6, &(0x7f0000000080)=0x6, r5, &(0x7f0000000180)=0xe, 0x0, 0x1)
r7 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0)

06:42:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000900", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1245.411741][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.419998][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1245.494781][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.503292][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000d00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1245.561587][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.570048][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.579735][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.587764][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:10 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r3 = syz_io_uring_setup(0x80000187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0xfffffffc)
socket(0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x5de9, &(0x7f0000000440)={0x0, 0x6b9a, 0x9, 0x1, 0x38}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000191000/0x4000)=nil, &(0x7f0000000080)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
io_uring_enter(r8, 0x636f, 0x0, 0x0, 0x0, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r11)

06:42:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000e00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1245.650722][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.658748][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.668188][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.676317][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.684105][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.692114][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.724508][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.732540][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1245.740016][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1245.748025][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:10 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000001000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1246.201638][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.209705][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1246.217552][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.225584][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1246.238104][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.246120][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r2, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r1, 0x6, 0x8001, 0x7, 0x1, 0x1, {0x2, r6}}, 0x7)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0)

06:42:11 executing program 4:
syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000190000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000480)=<r0=>0x0, &(0x7f0000000440))
syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffffe)
io_uring_enter(0xffffffffffffffff, 0x2a55, 0xfbee, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x382a, &(0x7f0000000040)={0x0, 0x8e7e, 0x8, 0xffffffff, 0x2e3}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x1, 0xd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9)
syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x3, 0x1, &(0x7f00000001c0)="40d6594f927d666085e1cb627e20e9693ac2e457686fa5693c737c9f49bde6be7d1f15beca45eb8d26db7b49e288a7193f1c884f29ad53db0da58592dc8e53bd5066f438db8b8d3051f7a421791bf0b79d845d1165eeadd8b0253f27dfd4ed32713898a7da896ec09c5d23f0cbd8089ebf9f2b3f952e4c5cd75ebf1c6bff0415a9875545f7dda6726a9046b4dac308642dfef47495820599fb4c2b58173daf80d246fc4bc8aeba49c98b04c529d0ac76bfe5c217b58d01680dbb760e7907139c10380eab421a1452d1250aed26739bf7f3dadb859574884784541d7084adcd4334ba96eef8d4e511da1124ff90a342fe47c9901a7f974990575099", 0x7, 0x0, 0x1, {0x3}}, 0x9)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x3, &(0x7f00000003c0)}, 0x1010001)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r1, 0x7, 0x0, 0x4, 0x0, 0x0, {0x0, r7}}, 0x1b3)

06:42:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_setup(0x3037, &(0x7f0000000040)={0x0, 0x96b2, 0x2, 0x1, 0x29e, 0x0, r0}, &(0x7f0000631000/0x4000)=nil, &(0x7f0000634000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x1c)
syz_io_uring_submit(0x0, r3, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000003c0)=""/117, 0x75}], 0x6, &(0x7f0000000840)=""/107, 0x6b}, 0x0, 0x40000020, 0x1, {0x3}}, 0x15eb)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:11 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1246.358342][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.366584][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1246.389462][    C0] scsi_io_completion_action: 5 callbacks suppressed
[ 1246.389492][    C0] sd 0:0:1:0: tag#2143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
06:42:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000b500", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:11 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet6(0xa, 0x0, 0x7fff)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x100, 0x0, {0x1, r7}}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040), 0x0)

[ 1246.390564][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.396167][    C0] sd 0:0:1:0: tag#2143 CDB: opcode=0xe5 (vendor)
[ 1246.405970][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1246.413947][    C0] sd 0:0:1:0: tag#2143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1246.437241][    C0] sd 0:0:1:0: tag#2143 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1246.446341][    C0] sd 0:0:1:0: tag#2143 CDB[20]: ba
[ 1246.469345][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.477585][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000009", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:11 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000040)=@l2tp={0x2, 0x0, @empty, 0x4}}, 0x7f)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1246.572767][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.580989][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1246.600104][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1246.608125][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:11 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000000d", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1247.053366][    C0] sd 0:0:1:0: tag#2152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1247.053844][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.063232][    C0] sd 0:0:1:0: tag#2152 CDB: opcode=0xe5 (vendor)
[ 1247.063250][    C0] sd 0:0:1:0: tag#2152 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1247.063272][    C0] sd 0:0:1:0: tag#2152 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1247.063289][    C0] sd 0:0:1:0: tag#2152 CDB[20]: ba
[ 1247.101592][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.114411][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.122498][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.130045][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.138054][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
getrlimit(0x7, &(0x7f0000000040))
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0xffff, 0x8d, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x2, 0x400, 0x3f, 0x5, 0x4, 0x7, 0x80000001, 0x20}, 0x0)
perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
creat(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
r4 = epoll_create(0x54)
mmap(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x8, 0x110, r4, 0xc59e4000)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x80000}, 0xfe8a)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
fallocate(r1, 0x20, 0xfffffffffffff800, 0x5)
r6 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:11 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f0000000040)={0x0, 0x7aa6, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f00006d2000/0x7000)=nil, 0x7000, 0x5, 0x8010, r0, 0x10000000)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d5000/0x3000)=nil, 0x3000, 0x1, 0x1, {0x0, r5}}, 0xffffff7f)

06:42:11 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000000e", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
setrlimit(0xd, &(0x7f0000000040)={0x6, 0x1})
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xfe22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x327e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1247.253024][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.261083][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.273469][    C0] sd 0:0:1:0: tag#2158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1247.275155][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.283425][    C0] sd 0:0:1:0: tag#2158 CDB: opcode=0xe5 (vendor)
06:42:12 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000040", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1247.291389][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.297694][    C0] sd 0:0:1:0: tag#2158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1247.314170][    C0] sd 0:0:1:0: tag#2158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1247.323320][    C0] sd 0:0:1:0: tag#2158 CDB[20]: ba
06:42:12 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
r7 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x9)
syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, 0x80800, 0x0, {0x0, r11}}, 0xff)
socket(0x0, 0x0, 0x0)

06:42:12 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000b4", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:12 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1247.547124][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.553280][    C0] sd 0:0:1:0: tag#2163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1247.555146][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.564946][    C0] sd 0:0:1:0: tag#2163 CDB: opcode=0xe5 (vendor)
[ 1247.572400][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.578697][    C0] sd 0:0:1:0: tag#2163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1247.586669][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.595686][    C0] sd 0:0:1:0: tag#2163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1247.595703][    C0] sd 0:0:1:0: tag#2163 CDB[20]: ba
[ 1247.603254][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.625313][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1247.632829][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.640846][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

06:42:12 executing program 4:
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r2 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000)
io_uring_enter(r2, 0x636f, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000040)={0x1, 0x0, 0x1})
socket(0x0, 0x0, 0x0)

06:42:12 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d20000000000000082000000000000000b5", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1247.923576][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1247.931629][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:12 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:12 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:12 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x88ec, 0x10, 0x1000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x18100)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x7, {0x0, r3}, 0x1, 0x1, 0x1}, 0x7c)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r0, {0x400}}, './file0\x00'})
fchdir(0xffffffffffffffff)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
io_uring_enter(r3, 0x568b, 0x8d53, 0x1, &(0x7f0000000380)={[0x2]}, 0x8)
r5 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000002, 0x110, r0, 0x10000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000140)="13e7f0812497e1060b8012bc9f3f4b1dfa40ee360a4abdd883e41e48c1a701fb9f47242e350f6451ca68f8c897b11cc523270e8b1ba3d71d4819262a51ba7cc1944fabed6e8378f1f197cb271a903c60e630687d8e438c76c2b9ad3df516c9cccb1432b0164ce2b4d5701dad57aafc64f1ef298be69fd339737c490cfc8a6594557e6b8186c249513a06728db9afac0fda977b59", 0x94, 0x0, 0x1}, 0xf18)
socket(0x0, 0x0, 0x0)
io_setup(0xed80, &(0x7f00000003c0)=<r7=>0x0)
r8 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
unlink(&(0x7f0000000280)='./file0\x00')
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000600), 0x1, 0x25a0c2322211bc75}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
io_uring_enter(r8, 0x636f, 0x0, 0x0, 0x0, 0x0)
io_cancel(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x0, r8, &(0x7f0000000400)="7148f827540abb545d2461d0029877b039318456a2fa0587afa378f6e5407ff0d44d90a78d972460993c0f6e7b9ce2ddb76c963055976ea2c7df7dbc4e793e923c", 0x41, 0x10001, 0x0, 0x2}, &(0x7f00000004c0))

[ 1248.085169][T14946] ==================================================================
[ 1248.093272][T14946] BUG: KCSAN: data-race in pipe_release / pipe_wait_readable
[ 1248.100647][T14946] 
[ 1248.102982][T14946] write to 0xffff88813091366c of 4 bytes by task 14935 on cpu 0:
[ 1248.110873][T14946]  pipe_release+0x186/0x1e0
[ 1248.115376][T14946]  __fput+0x295/0x520
[ 1248.119379][T14946]  ____fput+0x11/0x20
[ 1248.123360][T14946]  task_work_run+0x8e/0x110
[ 1248.126676][    C0] sd 0:0:1:0: tag#2166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1248.127880][T14946]  exit_to_user_mode_prepare+0x160/0x190
[ 1248.137713][    C0] sd 0:0:1:0: tag#2166 CDB: opcode=0xe5 (vendor)
[ 1248.143382][T14946]  syscall_exit_to_user_mode+0x20/0x40
[ 1248.143404][T14946]  do_syscall_64+0x50/0xa0
[ 1248.149750][    C0] sd 0:0:1:0: tag#2166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1248.155160][T14946]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1248.155188][T14946] 
[ 1248.155194][T14946] read to 0xffff88813091366c of 4 bytes by task 14946 on cpu 1:
[ 1248.159599][    C0] sd 0:0:1:0: tag#2166 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1248.168583][T14946]  pipe_wait_readable+0x1f7/0x240
[ 1248.168607][T14946]  splice_from_pipe_next+0x25e/0x3b0
[ 1248.174515][    C0] sd 0:0:1:0: tag#2166 CDB[20]: ba
[ 1248.176800][T14946]  __splice_from_pipe+0xaa/0x500
[ 1248.213802][T14946]  generic_splice_sendpage+0x94/0xd0
[ 1248.219102][T14946]  do_splice+0xa0e/0xde0
[ 1248.223332][T14946]  __se_sys_splice+0x2bd/0x3a0
[ 1248.228086][T14946]  __x64_sys_splice+0x74/0x80
[ 1248.232753][T14946]  do_syscall_64+0x44/0xa0
[ 1248.237160][T14946]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1248.243049][T14946] 
[ 1248.245357][T14946] value changed: 0x00000002 -> 0x00000001
[ 1248.251141][T14946] 
[ 1248.253450][T14946] Reported by Kernel Concurrency Sanitizer on:
[ 1248.259593][T14946] CPU: 1 PID: 14946 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 1248.268081][T14946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1248.278293][T14946] ==================================================================
06:42:12 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="09000000000000000000140000000c00018008000100", @ANYRESOCT, @ANYBLOB="69d451f9a543386f5cc6b48ca38355fcf2917934399f1d6af833bb3d5d0c9327493ceb858a6139fdb7e23800d16541fd562c4e2c906e3a303a10dee67585a6fa6029a8afd0a09712f2a13aebd805d64cafacd28d68690ceaef5fb81f734f4efda8914b1152c742dd4ffb8591d12562e35753ce8202cd9f48cdc26851a4de1d69"], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x4, 0x5, 0x3f, 0x2, 0x4, @empty, @local, 0x80, 0x10, 0x3}})
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7)
r8 = socket(0x10, 0x3, 0x0)
splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0)

[ 1248.340152][T26533] sg_write: 43 callbacks suppressed
[ 1248.340182][T26533] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.340182][T26533]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.348811][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.370734][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.378225][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
06:42:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x35ea, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x1f, 0x80, 0x3, 0x0, 0x0, 0x80081, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x6, 0xe9}, 0x2ea5e38928f55b9b, 0x0, 0xfffff001, 0x6, 0x4, 0x8, 0x2, 0x0, 0x4, 0x0, 0x401}, 0x0, 0xa, r0, 0x1a)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x1, 0x49, 0x1, 0x3f, 0x5, [{0x0, 0x80, 0xfffffffffffffffc, '\x00', 0x800}, {0x6, 0x9, 0x7fffffff, '\x00', 0x886}, {0x2, 0xfffffffffffffffa, 0x1, '\x00', 0x500}, {0x1, 0xffffffffffffffff, 0x1, '\x00', 0x2}, {0x2, 0x100000001, 0x133b, '\x00', 0xc03}]})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

06:42:13 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_setup(0x5e5a, &(0x7f0000000140)={0x0, 0x9f26, 0x4, 0x0, 0x229}, &(0x7f0000635000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x9, 0x0, 0xd7e3}, 0x0)
quotactl(0x80000001, &(0x7f0000000040)='./file0\x00', 0xee00, &(0x7f0000000080)="a2c41449aa68c8f921f9895ca6bcc1179d811ecb2f160d68aafc6a8da1c03f44e47089fb669613d1f3feb5e840")
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1248.386228][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.408817][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.416841][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:13 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1248.507900][T27981] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.507900][T27981]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.515851][    C0] sd 0:0:1:0: tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1248.535894][    C0] sd 0:0:1:0: tag#2169 CDB: opcode=0xe5 (vendor)
[ 1248.538778][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.542247][    C0] sd 0:0:1:0: tag#2169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1248.550207][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.559391][    C0] sd 0:0:1:0: tag#2169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1248.576105][    C0] sd 0:0:1:0: tag#2169 CDB[20]: ba
[ 1248.584391][T27981] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.584391][T27981]    program syz-executor.5 not setting count and/or reply_len properly
06:42:13 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1248.615471][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.623536][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.657390][T28403] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.657390][T28403]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.675722][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.683921][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.688481][T28403] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.688481][T28403]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.708822][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.717301][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:13 executing program 4:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x18, 0x28800, 0x23456}, 0x6)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000ffffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:13 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1248.794276][T28411] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.794276][T28411]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.812436][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.820610][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.832443][    C0] sd 0:0:1:0: tag#2175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1248.839845][T28411] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.839845][T28411]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.842288][    C0] sd 0:0:1:0: tag#2175 CDB: opcode=0xe5 (vendor)
[ 1248.842310][    C0] sd 0:0:1:0: tag#2175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1248.859653][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.865812][    C0] sd 0:0:1:0: tag#2175 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
06:42:13 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1248.874813][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1248.882799][    C0] sd 0:0:1:0: tag#2175 CDB[20]: ba
06:42:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000200", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1248.960843][T29788] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1248.960843][T29788]    program syz-executor.5 not setting count and/or reply_len properly
[ 1248.978745][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1248.986902][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1249.021920][T29788] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1249.021920][T29788]    program syz-executor.5 not setting count and/or reply_len properly
[ 1249.039654][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.047778][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1249.060485][    C0] sd 0:0:1:0: tag#2115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1249.070330][    C0] sd 0:0:1:0: tag#2115 CDB: opcode=0xe5 (vendor)
[ 1249.076690][    C0] sd 0:0:1:0: tag#2115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1249.085729][    C0] sd 0:0:1:0: tag#2115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1249.094805][    C0] sd 0:0:1:0: tag#2115 CDB[20]: ba
[ 1249.102894][T30690] sg_write: data in/out 4096/35 bytes for SCSI command 0x2a-- guessing data in;
[ 1249.102894][T30690]    program syz-executor.1 not setting count and/or reply_len properly
06:42:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1249.124164][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.132163][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
getrlimit(0xb, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)
r5 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
io_uring_enter(r5, 0x636f, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x6, 0x2, 0x0, 0x400000000, 0x2, 0x3, 0x7, 0x1da, 0x40, 0x263, 0xa5, 0x0, 0x38, 0x2, 0xac, 0x8, 0x1}, [{0x6474e551, 0x8, 0x2, 0xf9, 0x7ff, 0x8, 0x0, 0x6}], "72230ac14da0c3a199e152936ed3efb17d428cc81b99ef102c5c4b844c59bacb634967ac0243fb3ea78bc00e6c4ffd448786498a48c271d371456d79f432be043c2415b1a643f6235508f2316c3c2a07bc279e0c3eb3520b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d0)

06:42:14 executing program 4:
r0 = syz_io_uring_setup(0x756d, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
tee(r0, r0, 0x5, 0x3)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = eventfd(0x8)
sendfile(r3, r0, 0x0, 0x7)
r4 = socket(0x0, 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r7, 0xffffffffffffffff}}, './file0\x00'})

06:42:14 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1249.349442][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.357478][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1249.362029][    C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1249.374767][    C0] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor)
[ 1249.381112][    C0] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1249.390237][    C0] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
06:42:14 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1249.399293][    C0] sd 0:0:1:0: tag#2118 CDB[20]: ba
[ 1249.408214][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.416243][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1249.442015][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.450046][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1249.457702][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.465720][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000004d40)=r4, 0x1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x8000)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
syz_io_uring_setup(0x71cf, &(0x7f0000000040)={0x0, 0x4684, 0x10, 0x2, 0x37a}, &(0x7f0000634000/0x4000)=nil, &(0x7f0000636000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r5=>0x0)
r6 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ee6000/0x4000)=nil, 0x4000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x10000000)
io_uring_enter(r6, 0x636f, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd=r6, 0x7, 0x4, 0x81, 0x1, 0x1}, 0xfffffffc)

06:42:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000800", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:14 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
setrlimit(0x5, &(0x7f0000000040)={0x6, 0x81})
r4 = socket(0x26, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1249.650097][    C0] sd 0:0:1:0: tag#2122 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1249.659967][    C0] sd 0:0:1:0: tag#2122 CDB: opcode=0xe5 (vendor)
[ 1249.666316][    C0] sd 0:0:1:0: tag#2122 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1249.674787][   T23] audit: type=1400 audit(1636440134.389:1924): avc:  denied  { create } for  pid=31126 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1249.675370][    C0] sd 0:0:1:0: tag#2122 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1249.699858][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.704178][    C0] sd 0:0:1:0: tag#2122 CDB[20]: ba
[ 1249.717727][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xd65, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0)

[ 1249.772479][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1249.780510][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000900", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:14 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:14 executing program 4:
syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
socket(0x0, 0x0, 0x0)

06:42:14 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
r4 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000)
io_uring_enter(r4, 0x636f, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2000, @fd=r4, 0x790, 0x6, 0x69eb, 0x0, 0x0, {0x2}}, 0x2)
pipe(&(0x7f0000000240)={<r7=>0xffffffffffffffff})
r8 = socket(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0)
statx(r7, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x400, &(0x7f0000000340))

06:42:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgid(r0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000040)=<r8=>0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
kcmp(r7, r8, 0x0, r9, r1)
r10 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r10, 0x0, 0x4ffe0, 0x0)

[ 1250.040817][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.048851][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1250.068351][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.076602][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
r3 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
syz_io_uring_setup(0x4a3d, &(0x7f0000001400)={0x0, 0x515c, 0x20, 0x1, 0x70, 0x0, r0}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000004d40)=r4, 0x1)
sendmsg$sock(r4, &(0x7f0000000280)={&(0x7f0000000040)=@caif=@dgm={0x25, 0xfffff800, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000140)="5ab496b402f5675dd1689d16b3745c0eca690dc3e9422a66385db41962f3eb8745588d842ac1e31414df994d1c6eba740a587aabc306cbf83f895df26d4aab150fe37cbeae457d15fbc1d81169ceaa7d910d014650d3c244796d42", 0x5b}, {&(0x7f00000001c0)="d4097f31f6bae05c91e9dce847d9a2aa3d37a8522878146700af4efcdfe008a676010358fe67793c023971f0b6c7f6a809fead34a5237b3050a701b3eefa040e65f1939915e487244582ffdcef", 0x4d}], 0x3, &(0x7f0000001340)=[@txtime={{0x18, 0x1, 0x3d, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}], 0x60}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
io_uring_enter(r3, 0x7d4, 0xf76b, 0x1, &(0x7f00000013c0)={[0x9]}, 0x8)

[ 1250.109070][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.117126][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000d00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1250.223270][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.231590][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:15 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:15 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000e00", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

[ 1250.516883][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.525124][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1250.583265][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.591300][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1250.610669][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.618860][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:15 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r3, 0x10000000)
clock_gettime(0x0, &(0x7f0000000080))
syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4000, 0x1a3}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x4)
syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x100)

06:42:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:15 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1250.734966][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.743196][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1250.769024][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.777273][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1250.842674][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1250.851003][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:15 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x128c, 0x39, 0x200, 0x70bd29, 0x25dfdbfd, {0x19}, [@generic="36f8632aa1042bdc0c7ded9475aff8054706eb783ae50db19fd1771338d222bd4eb18833fcd8a12dd1cc5eb4c3f8d88ff7b3a13c8799c86e6802eced242ac9911e60af2c8551f28a84f1cdf5461e0390f4a21b20ebed65254b3486e86e39e47e7cb21b4c7181435d5cafcb14feade77a3747dedac2ec284b00291d104d5458d81a53e982c8b724215dc9e0d91933a730a42f8f22613bc6b5f44709f48a0ca69073f808929143cee9aa14847a21c953fa71e2d30785db7ae5d226e5b5b9624fd2a5ff7cc4c2977cbd628e3d11a42c5940b8534f2146c2eb889e8638d3e509bda42eeb40334c054ec2dac0c55f28", @typed={0x8, 0x73, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xa9, 0x51, 0x0, 0x1, [@generic="e656ea8508f624ee3f85a64a8c1f501290479174a25b56ef731abdb3b1a01b24d1ccf197d023e5b9ab4aaaf212d156cab2eae1b84393342f5b90735395b10871b3bc79a343e0712496fbb26633b956b34850a70c8b3a2581f0c4d9807e559b3abdf75e98a1fccd85996c79327a24", @generic="4b8440330032abb358cc1fdf0ddfb648792898e67942748a80f8b9450f19b26a401d80ad9944c5bd276b8a", @typed={0xc, 0x47, 0x0, 0x0, @u64=0x3}]}, @nested={0x10d4, 0x5f, 0x0, 0x1, [@typed={0x1004, 0x10, 0x0, 0x0, @binary="59971b1461a42f523917c3362740e92ab832888a3fd3562ea67b6e9389f9c837b13fec0ba0a0c74204689d248f35f2c941de8f3005fab1b3668a77ed3cd1196b6f2594742f5824abd9b8faab93323b51bcb385dca609ef389a361728bf8a60d8252242be7f0395d5a6cfb5547b1e7d03ae189693b2bd9b2eec96924b88d0c2610c508827e1cb9504acf056d946a1f372066d81765073072f54c72e05ab4d97adf804740b8ea164abf7928d6e5d7b461021d5f9a526c73d46912ee8d1e2ba4238e16f88cc7422c0cf0bcd32097fda97884713ff93671405ea873a5537b5fb34c09bce85312ae373a0111313b24e5fb5f9c04a3089ae9548c02b58c044dde7480435ee04a7f95132b0a2a5689fd2e618367adc60d2388201f9331230f7dd57e418b9db93c450f5c89e389a057b3a1a6cc03f44d130da894bdcc67f8a667889a6d59d48636baaebcdd7981b43da3c0f7618e734e72bf1edbbb2e8ea5c2705d4eb8ea1defa48c82ea876706d1c20e664b94c18596e470d41dd569a06f8976e3d5e86a90582a3c37b136a44aaa7d9c0facd4668da1744eb58d07293ca5e3c2f3026fc682b5cc1fbf6be934fa5d9bf4d3cc239094ff3e7264b54154b12b65e3a4e131634078ea4efd1b95017e8f89bbbc47285cb159fe45ce7755681143ee6c6f97ddb69b837968f197b38a3deed9e885c08c0fac14f75f60464f1f5ac4dd0a9adf856f58dd0c9f528c8c2e50362eb8f62287b05679ab8ffc67012be825bb118fa7efeb0bc50eb53313c47084cc59b37fbd892b2fda051ebbc7ff342b005e6b480bf6a7f47af091cece98f9e5d74f77735e0bb17581a699d317062f3e39651d81f9fcfb0024948cf213ff4c9ac218367effea3c12a68391b1f5d4ef1df00a519ae9b6b8c05640ee8d484e1be372a87cd6007a0643936889e742e7af4bc98e4aada653d6cfd4f469d0f03a92a8e76f26f6b82e2afee0802caeb2e58ca66cd9949ad14e85c4b0d73eabb20fbe40167327db852c12ecb9b41618bffa5e7aa33816c7d257fd6533c80b0f2eb2247d7ed8587b96b8449ea2e87099648cf00d2e499ec1f0a00c46eccde165aaf5b83821aaa4cf0be1a2bef33f791326e59f0ced445a6d29a09eb8d340edac0967cdff08bdb8baf83c511af50b8ff591bc3815e847a976cbb7360372fcb355e5c900756625346697a7fb5afd05d9f64ac14e75fa251dfbf3915aa1bff14bad0e213075b826838f15519ab10d582cbd11a7307faa3fedb4c07b87e54eeb92ee3bd95e9f75a3bc0866fdbaf5d353f9833b14b60489da3117435a5e8c8a5e0736b4cc7963897d4f320f24d715328403358c2ec9386b57cc75afa23c0a936d03172619fc5e787b4fd03fa2d41ca931ab5c712bb01dd99d570dc3efcc7b16f5ebc75f644508f83f47c39c48e59ed9828d880647feda6131db6adb6d4b0a6ab2a7ec72a9874d99131d5ae59144fb755f2296b6ffb6d3ae055f95f06f221ba9322c84a838641e969900a1958651f8a7191f54f1717901ed652d4098bec7d4946dfd17b92bfa26ffc0cd79f2cb535b0ac25cf9950513d54260c013ec0700d8579c685672692184a4b32b3073b3e7d44d3ffda2be3a095620c9b63b6ef05d6fcfb29b3071923bfcc96dbfab3debab61fa5da76aed70046eede0fbc7ff0ef225e67512b81c24fa8d54015d8f12f4cfd03314312e3ce3fab2c8a70f493f0a350bb9cf861734d8c98b40a1c6bc6fdbb4d29e351ef8fc1537ec68ca063986e8632a6d97bef39a8d0f22b646635777ca236fd390dd3eaefeb01e8732ecee176308ba9343638dc298e0d63988389399065c2b8a87615ac1ff5fe4273dbdfea96b55f5d2b40ae4a6653fcd46c5e0d4b2135bdbcfbf5aec8ef6a30756bd60d2f982eb95c0b2183e1715fee7ea35d0b3f8ed4d7acd14f761a4a92928608e82ce2a0f024028ec37f7ef4d4d457ff73fcbf58ec5f407d0af9f4c11760ed90f1044e1126cbb152adc070a7c291203e984ae67b01b527b4fb83cfcb9a8144472e47b5273ff2e5eada39d23fde56a942247836fea69ef3bc06b6d895aaaf4b271fd51107d967fd17ec13f4f7d59b2e95c2614aad9cb3263d67ca7ce654873cb3e568737e7c0f3ce31135ad25ab4bd9014c27d2741ee468e571aea184091990cf76da6b1d656bdbdeac791fb2862398bd674fc12ee884b4e9688efbc8bd15c2e05fdd835c510ff888dae9774be5dc85f670ded917d880f378e007c006683195aadd3b4b48e9e72c1bb76ba40d3ff9b469e710d2bef21c5284e3a1e7605e05029c5a0bc2143e7a83d65017a0b2bf6c24b7de9785f6f0a87af4b82fee79620eb5acf9d303b27aa6f36345557c7a0301ca7d9a0a5cb330b13d4248fcd78838e1687312a2d6d3f94bfb078676168f6d0a7d511ecd746b5cef9e0ab97489247c337db5446339a60c2b18ba426edd6aaef5fa7ddb271050841e3bfcf218f6958c38a8c9f87851508498af50f06fe39fa6211e17ae98472e359cb51659c00cad6b9a2ae8bdcb17c1977d4bba10f271f12dde59a5a7680ab81a689d1ef090475f5db2ad09b1fa3f647fa320ad4bdcdc8760721fdf4c26db3faa7af24a776aabcacaab68265a094d604a7e596e681ab091f89496fcdf55b7ee7ee6203aeea25a8f0e286de338c886034a9b5088bcc0cb766ec29e8625939b27d6f623f9ebfc3795b001e0ff96c82e3a564dd4baa303954276367b13ba45f4386f37a1e8120e44e7ab796ca08acaa38b6d8cbc5fc6296e3677b785c67f5231aaaaa51d4b7da0c0a921f412667e006d658f5e7d628a38685df9d433f1b203bb25054da823b33630f5cb9b85eb822938371c3670e8bc63bfb927ad764014def45305ab4caad3c03b7e20eb684c5f63bf87201b86904f2cffeb0415dc4f60f4cabe608a395270e9881ba07805797ab96fe42018808932e5871dfa8c47706afca8db18a5e18778c7c2310f9d260548c0a4584fe65e0480258f5616a3adb54d2c7d6b44b364cb1c099fbaab88630cd74b721d5959c5cdb40e54e1b3a6e5d532f9f76f87fe85b817b788898b31a3fe63a9f0ed37cf7ffee363481c7136f850de70e006ba49c6b4c26309fe730ce1584e058ddd1f9c525953b61b84e15fe353b15d8895a7bf10a001ad8acd3c7a53dfd141666f252d7c6d631e52801646abf0fd03f75d0d0953369178b2cb6cae812cc4b5b535ccf9b1ee782fb034f695181ff6dedd69e95979b8e594ebf89a8f2089e3eab1ed9e01b3d221e94fa9889e3d8719d3cf1c76bf254004d9517c1e82ca21b29a9ad7e978457bc14e5337109af6e0a18b09f4025b1472a2297b1355a25640e8bb4c2c73c7f5d2f75c6669522db4d49d90eedaf404fdb7c48dd2fbf0408b6a8165ee14e88f6d75bd8dfbcd99042e0a75e1038c85f778b55dfc6db29461b097d0715e7613a7acd094f33fe9fbab10ef243ee89b672a1af7688e2d12c8da5c52592cd02b8514b82fcf73f501920908c1ad06f40bc440d741fbae4629ad4e431b1c3760d231f847cd60cc24f890da0079736d683d664927686a9ab40381f64642b92b3e4eabe1c4f63927bb2802e7c13b71b9ed256c6ee1c3fdbd175cad6236a3e9996a4af5a5b93fe254cb63af20569fdb14955c93bc4d3173e293719d9b05bb8887385f7af421af786d364a5051737c246dbfa024929cf8b2f1431ed29686780adac2262b7243d1d661e2a2c1cce36a1edd0f52d8c072c99232da8755bb7913385d170ff57a954ce4c478d710cd8fec5f4c234f9f22e1de5e46a99b459e7ea8c4e5c623a40681aa9be419683fdcd11a93784d761cf42f249857244e8622b059b0c9973782c62f9a1cf8e543b57590aa7fd79714dee9dfd4396e2da08af516e00c1f234e658a0d8b4f4f90f9d09224751513a7e7d1b7b05f85e956af2933d86322635aa00de5470acbb2b725397a4624b29932f9987296865942252f35e3401041ff970dc2bfc7357a1842f8bb90b6e700722f11090646baed6c2107dd03ff27e04284bb890f29b04fc562a9b7498c03bf7fe54669cd2ab3282b38a3f8d17e3732daa38b99d6811428632639b4eab57c56e743ab80a42b2965c15a7d32e155c755d0caae538c9393b3e1db6326924393e707798ece1bbb9a2636409759dbee4186f9240dc8e49ea22db17dba353b7f2033ced9c87fb97923d416f86f0b951cbad6dfa4c13d12c62680ffc1777b3bf64ee99fa38b3c7f7df327eef4d58441e012106eeb80a44c5e9d62343bc6a4b8ff8cc210aca945de3f6b87bd02245b8029f4e7738aba8f7e874552c5d3525b3923fca20bffc2ca27dcb099f8c5800096cda05083c4b80e50a165fa4e43b7393da4ee16350b5c4d9a00c2e4c042ef47ffacd21f6145600951d4a6871164b1e1dd7c7395497fea04b077944b03c9e49ffd8b452efece91282dc363dbe3543a8bba0ceff11f0010fa7b997ed13fbfd49ceb8e9f15c031395139e40e7d3024099d888130dbea2c5e6aa0bd0676465379ff2c4ecb1a2066f482f0cb34075d8090e9cd5813af469949a064dc509470d05050bbb38afaf6f4053bc38a4f85b7b8b93beeff3a97e5317d81b0db58595b871633f44f2eac00ae9806d1cc62b8a0c605a3132e3f5f33bd8ba3862bbde40ccf81652361c371883451afc689db50a12641002c9bbd6c34e9a7afbea21f9d771359740b93d3c539438188f9c1f8a87e3c7bf691404c77e898a3a1ed24dad428eeceac4f1eb00e398370e65b25501274ba13816b74c1e6c7481617bab05990ddc18ee5b9419fd6f0e98cd04bbb42470329035ee6223ede61f76603bfb41da60013891ecbca4eef882dc3d0c1b1139713387b6552d28e1145d23b3f97f3d27a9e37020c9db0617360a6b66d94500dccd8ef0bc28b2f0d4bff67d0c1ada3f35f4000796267058aee53d2331f217804b4baa9853b06380a713ea274a966ecf010df34eb9b90b5550b6293850915448f3a35bfada976873636258f7cb3c16bf298f83720e09255b4388341856f4129586e62c704bce54495914b50b30b28e95df1481031d61ce6719c11f527b975e5231f5eee8f956a5a7c7268c5800106ede8e79c54c0bdd6a351ba63693cef008b870e0fee9386acdbe0c0bbe3c94f25c6ad0e15981594ab5f5b347181d8959f00031f632f1cc808b6e4abd6b2b4b4adfb543b0c832a992b8673c1a31906b6a525ae6ce9b84cc7c2bae183fae47a5dd08495d4da027f7a1125f2ef56a5dc8d133e7ae3df5019df891045abf34baa67e5289c1196bd8f084dd05e0b199190fd85117ed7b47b8b336e57f6aaef64ccaeb8a04944738e4670c9a54dcba377f4ad8e74692035e9d2731cc1913f38c0fe25c71cbad68daebedaf741a2579d19116d7ff5734f198920ed39a604fbd2cce1e94c92bdc83fb218c0706f3f8b86508b7696786e14aa024b1fd6577e57ce8e77d795ce3f7ea6752184e499067d2001cb51cd69a589ada1f7d4eb15028477ee0cc31abd7094de9054b7e8704d69f40d928fd801164e345699422f68cc901d18309738bf9d7b32bda3285bdc7b1dee573bad75a5a4d2788879bbda78fe5c5a46bbf4db7ff9d65ab8659be572c81b076bcad58321960a8eed84ebefd20bb9386dbd963e6dce57a56d36d22129e73594801bf623286f9f3b991b752b8cafbf037f944fb1a2b77fea3d9957febc467ed7b2348d5fcb375d7ceef3984358b6929edeb68ba160ef075837f570237d34f2e6ef2e9376d4e993c698704a09058ca2be6ddbbf107255b35092eb88f2c39458cd05eb02"}, @generic="ed1ef87be17d2efafaf26286894d49959ddcd52b62e0eb53988d1c2509743e541e980c1bcf2c0c9db58dbdbf019ec0ce828a299f4e85c6fd5e4eec732cd25be34d3afb7d0298b9a818bb7835f35e5f652db529a105dd8644d2a67c5bdefc69c2520e83d84ee4e36e58419b5e8d41263945505e2b3362c69736bc7f638e08c5ee3f1177c63383fed0baf09b302faca3a481304a4a067c3b10025d96418c3287c1353e8805d4bde84834c8f277647c22653247fc9f4d53d909353974603f003736055b11e0", @typed={0x5, 0x96, 0x0, 0x0, @str='\x00'}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = dup(r3)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0)

06:42:15 executing program 3:
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x77, "dfcd45ceeaf06fba3ceb1eca2b17d8b20d1a792276aac2f2d0a68b13157d5e0d3110f78e2653fa60264a288498ed7cad684e318d1da2b6753fdc8435fb0e91dfa35de41106f3cb65870b7dfa3aca7019786e15921acead1e4f44bac08402de1e157575bc81e1fca7bb9be49eca0939a77167ca307ac3ac"}, &(0x7f0000000080)=0x9b)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x10000000, 0x1ff, 0x6, 0x9, 0x3475, 0x3, 0xfff, 0xffff0000}, 0x0)
r4 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000004d40)=r5, 0x1)
sendmsg(r5, &(0x7f0000000580)={&(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="80f03bc5a2401462c0f9a428ee10c5e6f956bb137d548890896e1d17dff20a5dc0541953e393d4c0bdfd40100100affca803d16bf72d7794fb0211ee0a60207a0c03fe3f17ee5eccfadb7d45a2cd773592d5595146306b0d4557af1c1a4e467313bf6742c4f0d3fa2fe9dad394a8359ecbbf646800e41316e743426713b6fcdfefaf79f8ade2e00695201fc1e702ba5b35fa78e87f7c4daf2c48c5f2b99cafdec6739e4ca3e825fc031ad79c90a9bcb7eff422b43ff57c639297551c6ca56fb80f3394092026571635112d8f8361c3f776793397df420cd79e96add0bf1b0cc99cb88b052230e857ce957c3cf56d6b85d8bd", 0xf2}], 0x1, &(0x7f00000004c0)=[{0xb8, 0x1, 0x65, "d3e74dc5c7443116f7d1faa9e50f6fbc89de89367316882bfc9fc4c204eeea993996e1197597b1548bec64c0605e7ddd79309789ce159857080c032d7573cf383726ce83adbd6d9cdcfb2178d748f9cd0846fa97f81a1c0d5226fa146710930ccfcdbd4a09eec00c067f841ce114f6643d588f2213f70e6c563183a874ca4302b61889070ac4cd5fd1407f7edd08d68aac2d13f0bdafbbfc583c9a673ac2b7be72e65ba79f23ff"}], 0xb8}, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = socket(0x10, 0x3, 0x0)
splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0)

06:42:15 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000afef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001300", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:15 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x30000045, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x7}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x41402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x440000000, 0xb}, 0x4f928, 0x0, 0x8, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_io_uring_setup(0x6591, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
io_uring_enter(r3, 0x7425, 0x0, 0x1, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x8})
r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xdac3, 0x0, 0x80004, 0x2}, &(0x7f0000635000/0x3000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r6, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = socket(0x10, 0x3, 0x0)
splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0)

[ 1251.033876][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.042185][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1251.060094][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.068146][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1251.164285][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.172362][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:16 executing program 4:
r0 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000004d40)=r1, 0x1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000004d40)=r6, 0x1)
setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f0000000080)=0x8, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

06:42:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000001400", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000007fff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYRES64=r0])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
io_uring_enter(0xffffffffffffffff, 0x636f, 0x464e, 0x2, 0x0, 0x0)
r5 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x3, &(0x7f00000003c0)}, 0x1010001)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
io_uring_enter(r5, 0x636f, 0x0, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = socket(0x10, 0x3, 0x0)
splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0)

[ 1251.431591][    C1] scsi_io_completion_action: 5 callbacks suppressed
[ 1251.431620][    C1] sd 0:0:1:0: tag#2147 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1251.448117][    C1] sd 0:0:1:0: tag#2147 CDB: opcode=0xe5 (vendor)
[ 1251.454566][    C1] sd 0:0:1:0: tag#2147 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1251.463623][    C1] sd 0:0:1:0: tag#2147 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1251.472640][    C1] sd 0:0:1:0: tag#2147 CDB[20]: ba
06:42:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1251.493420][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.501452][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1251.508964][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.516959][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1251.548166][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.556218][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000009", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:16 executing program 4:
r0 = syz_io_uring_setup(0x198, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080))
socket(0x0, 0x0, 0x0)

[ 1251.629824][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.637863][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1251.702953][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1251.710997][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1251.718487][    C1] sd 0:0:1:0: tag#2153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1251.728320][    C1] sd 0:0:1:0: tag#2153 CDB: opcode=0xe5 (vendor)
[ 1251.734688][    C1] sd 0:0:1:0: tag#2153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1251.743725][    C1] sd 0:0:1:0: tag#2153 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1251.752756][    C1] sd 0:0:1:0: tag#2153 CDB[20]: ba
06:42:16 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000ffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:16 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[ 1252.001400][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.009477][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.017018][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.025132][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.032622][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.040640][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000029c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002980)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/240, 0xf0}, {&(0x7f00000017c0)=""/216, 0xd8}, {&(0x7f0000000040)=""/32, 0x20}], 0xa, &(0x7f0000001980)=""/4096, 0x1000}, 0x0, 0x3, 0x1, {0x3}}, 0x68f)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 1252.048128][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.056298][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000ffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000000d", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:17 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x1f99, 0x3, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5de6, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x3, &(0x7f00000003c0)}, 0x1010001)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0)
r7 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000004d40)=r8, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1}, 0x101)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0)
r9 = syz_open_pts(0xffffffffffffffff, 0x60000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x0)

[ 1252.312494][    C1] sd 0:0:1:0: tag#2166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1252.322455][    C1] sd 0:0:1:0: tag#2166 CDB: opcode=0xe5 (vendor)
[ 1252.328788][    C1] sd 0:0:1:0: tag#2166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1252.337843][    C1] sd 0:0:1:0: tag#2166 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1252.346884][    C1] sd 0:0:1:0: tag#2166 CDB[20]: ba
06:42:17 executing program 3:
r0 = syz_io_uring_setup(0x358a, &(0x7f0000004c40)={0x0, 0x45be}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000004cc0), &(0x7f0000004d00))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/keycreate\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000004d40)=r1, 0x1)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x1)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000ffff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000020000000000000000e", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000ffef", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1252.434242][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.442297][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.449872][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.457898][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.465405][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.473434][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000007fff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1252.480930][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.488914][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.496429][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.504426][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.512302][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.513680][    C0] sd 0:0:1:0: tag#2174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 1252.520283][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.520319][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.530122][    C0] sd 0:0:1:0: tag#2174 CDB: opcode=0xe5 (vendor)
[ 1252.537550][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.545519][    C0] sd 0:0:1:0: tag#2174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 1252.568304][    C0] sd 0:0:1:0: tag#2174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 1252.577346][    C0] sd 0:0:1:0: tag#2174 CDB[20]: ba
06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000f5ff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1252.593658][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.601686][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d200000000000000820000000000000fbff", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[ 1252.711787][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.719875][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.727388][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.735394][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1252.742900][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1252.750902][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
06:42:17 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x101, 0xfffffff7, 0xab, 0x0, 0x4, 0x8000, 0x6}, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffefff9}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
getpid()
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
setrlimit(0xa, &(0x7f0000000240)={0x3, 0x4})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000040)={0x6, 'veth0_macvtap\x00', {0x40}, 0x3})
splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0)

06:42:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0)

06:42:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="463bf30600ad0000"])
r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000000200000000000000013", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)

06:42:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={&(0x7f0000000500), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8241000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x51}, {&(0x7f0000000040)="53000000feffffff770400000000200010004d2000000000000008200000000000000000", 0xffffffe5}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

06:42:18 executing program 4:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0)
io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x58200, 0x5)
socket(0x0, 0x0, 0x0)

[ 1253.196772][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1253.204881][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1253.212389][    C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] 
[ 1253.220476][    C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb
[ 1253.272834][    C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVE