x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1206.713742][ C1] sd 0:0:1:0: tag#797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1206.723511][ C1] sd 0:0:1:0: tag#797 CDB: opcode=0xe5 (vendor) [ 1206.729755][ C1] sd 0:0:1:0: tag#797 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1206.738717][ C1] sd 0:0:1:0: tag#797 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1206.747775][ C1] sd 0:0:1:0: tag#797 CDB[20]: ba [ 1207.232005][ C1] sd 0:0:1:0: tag#798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.241835][ C1] sd 0:0:1:0: tag#798 CDB: opcode=0xe5 (vendor) [ 1207.248141][ C1] sd 0:0:1:0: tag#798 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1207.257114][ C1] sd 0:0:1:0: tag#798 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1207.266111][ C1] sd 0:0:1:0: tag#798 CDB[20]: ba [ 1207.452327][ C0] sd 0:0:1:0: tag#768 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.462088][ C0] sd 0:0:1:0: tag#768 CDB: opcode=0xe5 (vendor) [ 1207.468345][ C0] sd 0:0:1:0: tag#768 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1207.477312][ C0] sd 0:0:1:0: tag#768 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1207.486286][ C0] sd 0:0:1:0: tag#768 CDB[20]: ba 03:49:28 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1208.748860][ C0] sd 0:0:1:0: tag#772 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.758635][ C0] sd 0:0:1:0: tag#772 CDB: opcode=0xe5 (vendor) [ 1208.764887][ C0] sd 0:0:1:0: tag#772 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.773839][ C0] sd 0:0:1:0: tag#772 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.782781][ C0] sd 0:0:1:0: tag#772 CDB[20]: ba 03:49:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1208.899684][ C0] sd 0:0:1:0: tag#1028 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.909579][ C0] sd 0:0:1:0: tag#1028 CDB: opcode=0xe5 (vendor) [ 1208.915957][ C0] sd 0:0:1:0: tag#1028 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.924988][ C0] sd 0:0:1:0: tag#1028 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.934041][ C0] sd 0:0:1:0: tag#1028 CDB[20]: ba [ 1208.947558][ C1] sd 0:0:1:0: tag#1029 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.957427][ C1] sd 0:0:1:0: tag#1029 CDB: opcode=0xe5 (vendor) [ 1208.964310][ C1] sd 0:0:1:0: tag#1029 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.973373][ C1] sd 0:0:1:0: tag#1029 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.982593][ C1] sd 0:0:1:0: tag#1029 CDB[20]: ba [ 1208.995903][ C1] sd 0:0:1:0: tag#1030 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.005885][ C1] sd 0:0:1:0: tag#1030 CDB: opcode=0xe5 (vendor) [ 1209.012249][ C1] sd 0:0:1:0: tag#1030 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1209.021278][ C1] sd 0:0:1:0: tag#1030 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1209.030326][ C1] sd 0:0:1:0: tag#1030 CDB[20]: ba [ 1209.200338][ C0] sd 0:0:1:0: tag#1031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.210228][ C0] sd 0:0:1:0: tag#1031 CDB: opcode=0xe5 (vendor) [ 1209.216577][ C0] sd 0:0:1:0: tag#1031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1209.225717][ C0] sd 0:0:1:0: tag#1031 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1209.234748][ C0] sd 0:0:1:0: tag#1031 CDB[20]: ba [ 1210.721298][ C0] sd 0:0:1:0: tag#1033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1210.731263][ C0] sd 0:0:1:0: tag#1033 CDB: opcode=0xe5 (vendor) [ 1210.737614][ C0] sd 0:0:1:0: tag#1033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1210.746684][ C0] sd 0:0:1:0: tag#1033 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1210.755733][ C0] sd 0:0:1:0: tag#1033 CDB[20]: ba 03:49:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:32 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1212.644166][ C1] sd 0:0:1:0: tag#1024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1212.654039][ C1] sd 0:0:1:0: tag#1024 CDB: opcode=0xe5 (vendor) [ 1212.660387][ C1] sd 0:0:1:0: tag#1024 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1212.669543][ C1] sd 0:0:1:0: tag#1024 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1212.678566][ C1] sd 0:0:1:0: tag#1024 CDB[20]: ba 03:49:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1212.695227][ C1] sd 0:0:1:0: tag#1025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1212.705081][ C1] sd 0:0:1:0: tag#1025 CDB: opcode=0xe5 (vendor) [ 1212.711410][ C1] sd 0:0:1:0: tag#1025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1212.720478][ C1] sd 0:0:1:0: tag#1025 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1212.729559][ C1] sd 0:0:1:0: tag#1025 CDB[20]: ba 03:49:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:32 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1212.827352][ C0] sd 0:0:1:0: tag#1034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1212.837201][ C0] sd 0:0:1:0: tag#1034 CDB: opcode=0xe5 (vendor) [ 1212.843580][ C0] sd 0:0:1:0: tag#1034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1212.853604][ C0] sd 0:0:1:0: tag#1034 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1212.862667][ C0] sd 0:0:1:0: tag#1034 CDB[20]: ba 03:49:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x0, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1213.094837][ C0] sd 0:0:1:0: tag#1075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1213.104775][ C0] sd 0:0:1:0: tag#1075 CDB: opcode=0xe5 (vendor) [ 1213.111113][ C0] sd 0:0:1:0: tag#1075 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1213.120160][ C0] sd 0:0:1:0: tag#1075 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1213.129374][ C0] sd 0:0:1:0: tag#1075 CDB[20]: ba 03:49:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:35 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1215.708309][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1215.708345][ C0] sd 0:0:1:0: tag#1103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1215.724795][ C0] sd 0:0:1:0: tag#1103 CDB: opcode=0xe5 (vendor) [ 1215.731123][ C0] sd 0:0:1:0: tag#1103 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1215.740273][ C0] sd 0:0:1:0: tag#1103 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1215.749317][ C0] sd 0:0:1:0: tag#1103 CDB[20]: ba 03:49:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1215.895334][ C1] sd 0:0:1:0: tag#1294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1215.905212][ C1] sd 0:0:1:0: tag#1294 CDB: opcode=0xe5 (vendor) [ 1215.911568][ C1] sd 0:0:1:0: tag#1294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1215.920613][ C1] sd 0:0:1:0: tag#1294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1215.929666][ C1] sd 0:0:1:0: tag#1294 CDB[20]: ba [ 1217.717516][ C1] sd 0:0:1:0: tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1217.727389][ C1] sd 0:0:1:0: tag#1317 CDB: opcode=0xe5 (vendor) [ 1217.733757][ C1] sd 0:0:1:0: tag#1317 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1217.743331][ C1] sd 0:0:1:0: tag#1317 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1217.752368][ C1] sd 0:0:1:0: tag#1317 CDB[20]: ba 03:49:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:37 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:37 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1217.998511][ C1] sd 0:0:1:0: tag#1318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1218.008422][ C1] sd 0:0:1:0: tag#1318 CDB: opcode=0xe5 (vendor) [ 1218.014797][ C1] sd 0:0:1:0: tag#1318 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1218.023857][ C1] sd 0:0:1:0: tag#1318 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1218.032917][ C1] sd 0:0:1:0: tag#1318 CDB[20]: ba 03:49:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x0, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1220.179988][ C1] sd 0:0:1:0: tag#1093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1220.189996][ C1] sd 0:0:1:0: tag#1093 CDB: opcode=0xe5 (vendor) [ 1220.196390][ C1] sd 0:0:1:0: tag#1093 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1220.205480][ C1] sd 0:0:1:0: tag#1093 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1220.214549][ C1] sd 0:0:1:0: tag#1093 CDB[20]: ba [ 1220.219702][ C1] sd 0:0:1:0: tag#1094 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1220.229557][ C1] sd 0:0:1:0: tag#1094 CDB: opcode=0xe5 (vendor) [ 1220.235914][ C1] sd 0:0:1:0: tag#1094 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1220.244967][ C1] sd 0:0:1:0: tag#1094 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1220.254043][ C1] sd 0:0:1:0: tag#1094 CDB[20]: ba 03:49:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:42 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1222.743545][ C0] sd 0:0:1:0: tag#1391 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1222.753420][ C0] sd 0:0:1:0: tag#1391 CDB: opcode=0xe5 (vendor) [ 1222.759765][ C0] sd 0:0:1:0: tag#1391 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1222.768814][ C0] sd 0:0:1:0: tag#1391 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1222.777882][ C0] sd 0:0:1:0: tag#1391 CDB[20]: ba [ 1222.880123][ C1] sd 0:0:1:0: tag#1303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1222.884263][ C0] sd 0:0:1:0: tag#1304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1222.890015][ C1] sd 0:0:1:0: tag#1303 CDB: opcode=0xe5 (vendor) [ 1222.899771][ C0] sd 0:0:1:0: tag#1304 CDB: opcode=0xe5 (vendor) [ 1222.899787][ C0] sd 0:0:1:0: tag#1304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1222.899804][ C0] sd 0:0:1:0: tag#1304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1222.906134][ C1] sd 0:0:1:0: tag#1303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1222.912419][ C0] sd 0:0:1:0: tag#1304 CDB[20]: ba [ 1222.944731][ C1] sd 0:0:1:0: tag#1303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1222.953799][ C1] sd 0:0:1:0: tag#1303 CDB[20]: ba 03:49:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:46 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1226.733348][ C1] sd 0:0:1:0: tag#1314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1226.743241][ C1] sd 0:0:1:0: tag#1314 CDB: opcode=0xe5 (vendor) [ 1226.749870][ C1] sd 0:0:1:0: tag#1314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1226.759023][ C1] sd 0:0:1:0: tag#1314 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1226.768111][ C1] sd 0:0:1:0: tag#1314 CDB[20]: ba 03:49:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x0, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:46 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1226.975568][ C1] sd 0:0:1:0: tag#1313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1226.985427][ C1] sd 0:0:1:0: tag#1313 CDB: opcode=0xe5 (vendor) [ 1226.991768][ C1] sd 0:0:1:0: tag#1313 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1227.000831][ C1] sd 0:0:1:0: tag#1313 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1227.002217][ C0] sd 0:0:1:0: tag#1315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1227.009903][ C1] sd 0:0:1:0: tag#1313 CDB[20]: ba [ 1227.019707][ C0] sd 0:0:1:0: tag#1315 CDB: opcode=0xe5 (vendor) [ 1227.031120][ C0] sd 0:0:1:0: tag#1315 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1227.040294][ C0] sd 0:0:1:0: tag#1315 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1227.049336][ C0] sd 0:0:1:0: tag#1315 CDB[20]: ba 03:49:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:48 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1229.669570][ C1] sd 0:0:1:0: tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.671546][ C0] sd 0:0:1:0: tag#1316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.679454][ C1] sd 0:0:1:0: tag#1317 CDB: opcode=0xe5 (vendor) [ 1229.689274][ C0] sd 0:0:1:0: tag#1316 CDB: opcode=0xe5 (vendor) [ 1229.695596][ C1] sd 0:0:1:0: tag#1317 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1229.701909][ C0] sd 0:0:1:0: tag#1316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1229.710895][ C1] sd 0:0:1:0: tag#1317 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.719916][ C0] sd 0:0:1:0: tag#1316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.728909][ C1] sd 0:0:1:0: tag#1317 CDB[20]: ba [ 1229.737908][ C0] sd 0:0:1:0: tag#1316 CDB[20]: ba 03:49:51 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:51 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:51 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1231.809517][ C0] sd 0:0:1:0: tag#1322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1231.819400][ C0] sd 0:0:1:0: tag#1322 CDB: opcode=0xe5 (vendor) [ 1231.825746][ C0] sd 0:0:1:0: tag#1322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1231.834994][ C0] sd 0:0:1:0: tag#1322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1231.844021][ C0] sd 0:0:1:0: tag#1322 CDB[20]: ba 03:49:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1232.701357][ C1] sd 0:0:1:0: tag#1292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1232.711251][ C1] sd 0:0:1:0: tag#1292 CDB: opcode=0xe5 (vendor) [ 1232.717612][ C1] sd 0:0:1:0: tag#1292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1232.726665][ C1] sd 0:0:1:0: tag#1292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1232.735997][ C1] sd 0:0:1:0: tag#1292 CDB[20]: ba 03:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:53 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:53 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1233.942732][ C0] sd 0:0:1:0: tag#1308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1233.952778][ C0] sd 0:0:1:0: tag#1308 CDB: opcode=0xe5 (vendor) [ 1233.959133][ C0] sd 0:0:1:0: tag#1308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1233.968269][ C0] sd 0:0:1:0: tag#1308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1233.977305][ C0] sd 0:0:1:0: tag#1308 CDB[20]: ba [ 1234.385193][ C1] sd 0:0:1:0: tag#1309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1234.395087][ C1] sd 0:0:1:0: tag#1309 CDB: opcode=0xe5 (vendor) [ 1234.401416][ C1] sd 0:0:1:0: tag#1309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1234.410478][ C1] sd 0:0:1:0: tag#1309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1234.419521][ C1] sd 0:0:1:0: tag#1309 CDB[20]: ba [ 1234.960906][ C1] sd 0:0:1:0: tag#1310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1234.970791][ C1] sd 0:0:1:0: tag#1310 CDB: opcode=0xe5 (vendor) [ 1234.977158][ C1] sd 0:0:1:0: tag#1310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1234.986208][ C1] sd 0:0:1:0: tag#1310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1234.995265][ C1] sd 0:0:1:0: tag#1310 CDB[20]: ba 03:49:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:55 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:55 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1235.808755][ C1] sd 0:0:1:0: tag#1301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.810227][ C0] sd 0:0:1:0: tag#1302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.818619][ C1] sd 0:0:1:0: tag#1301 CDB: opcode=0xe5 (vendor) [ 1235.828424][ C0] sd 0:0:1:0: tag#1302 CDB: opcode=0xe5 (vendor) [ 1235.828451][ C0] sd 0:0:1:0: tag#1302 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.834750][ C1] sd 0:0:1:0: tag#1301 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.841047][ C0] sd 0:0:1:0: tag#1302 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.850050][ C1] sd 0:0:1:0: tag#1301 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.859050][ C0] sd 0:0:1:0: tag#1302 CDB[20]: ba [ 1235.868085][ C1] sd 0:0:1:0: tag#1301 CDB[20]: ba 03:49:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:58 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:49:58 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1238.693103][ C0] sd 0:0:1:0: tag#1303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1238.702966][ C0] sd 0:0:1:0: tag#1303 CDB: opcode=0xe5 (vendor) [ 1238.709317][ C0] sd 0:0:1:0: tag#1303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1238.718383][ C0] sd 0:0:1:0: tag#1303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1238.727507][ C0] sd 0:0:1:0: tag#1303 CDB[20]: ba [ 1238.912079][ C1] sd 0:0:1:0: tag#1304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1238.922004][ C1] sd 0:0:1:0: tag#1304 CDB: opcode=0xe5 (vendor) [ 1238.928329][ C1] sd 0:0:1:0: tag#1304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1238.937457][ C1] sd 0:0:1:0: tag#1304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1238.946493][ C1] sd 0:0:1:0: tag#1304 CDB[20]: ba 03:49:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x0, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:00 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:00 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:01 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1241.721590][ C0] sd 0:0:1:0: tag#1311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1241.731467][ C0] sd 0:0:1:0: tag#1311 CDB: opcode=0xe5 (vendor) [ 1241.737814][ C0] sd 0:0:1:0: tag#1311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1241.746863][ C0] sd 0:0:1:0: tag#1311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1241.755912][ C0] sd 0:0:1:0: tag#1311 CDB[20]: ba [ 1241.770963][ C1] sd 0:0:1:0: tag#1341 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1241.780891][ C1] sd 0:0:1:0: tag#1341 CDB: opcode=0xe5 (vendor) [ 1241.787252][ C1] sd 0:0:1:0: tag#1341 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1241.796323][ C1] sd 0:0:1:0: tag#1341 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1241.805359][ C1] sd 0:0:1:0: tag#1341 CDB[20]: ba 03:50:03 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:03 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:03 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1243.771361][ C0] sd 0:0:1:0: tag#1342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1243.781223][ C0] sd 0:0:1:0: tag#1342 CDB: opcode=0xe5 (vendor) [ 1243.787579][ C0] sd 0:0:1:0: tag#1342 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1243.796643][ C0] sd 0:0:1:0: tag#1342 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1243.805735][ C0] sd 0:0:1:0: tag#1342 CDB[20]: ba [ 1243.858578][ C1] sd 0:0:1:0: tag#1343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1243.868466][ C1] sd 0:0:1:0: tag#1343 CDB: opcode=0xe5 (vendor) [ 1243.874824][ C1] sd 0:0:1:0: tag#1343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1243.883872][ C1] sd 0:0:1:0: tag#1343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1243.892912][ C1] sd 0:0:1:0: tag#1343 CDB[20]: ba 03:50:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x0, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:06 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:06 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1246.668281][ C0] sd 0:0:1:0: tag#1280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1246.678144][ C0] sd 0:0:1:0: tag#1280 CDB: opcode=0xe5 (vendor) [ 1246.684668][ C0] sd 0:0:1:0: tag#1280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1246.693746][ C0] sd 0:0:1:0: tag#1280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1246.702769][ C0] sd 0:0:1:0: tag#1280 CDB[20]: ba [ 1246.733633][ C1] sd 0:0:1:0: tag#1282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1246.743512][ C1] sd 0:0:1:0: tag#1282 CDB: opcode=0xe5 (vendor) [ 1246.749850][ C1] sd 0:0:1:0: tag#1282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1246.758975][ C1] sd 0:0:1:0: tag#1282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1246.768026][ C1] sd 0:0:1:0: tag#1282 CDB[20]: ba 03:50:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:08 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1248.818357][ C0] sd 0:0:1:0: tag#1340 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1248.828240][ C0] sd 0:0:1:0: tag#1340 CDB: opcode=0xe5 (vendor) [ 1248.834607][ C0] sd 0:0:1:0: tag#1340 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1248.843685][ C0] sd 0:0:1:0: tag#1340 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1248.852761][ C0] sd 0:0:1:0: tag#1340 CDB[20]: ba [ 1249.168875][ C1] sd 0:0:1:0: tag#1441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1249.178792][ C1] sd 0:0:1:0: tag#1441 CDB: opcode=0xe5 (vendor) [ 1249.185162][ C1] sd 0:0:1:0: tag#1441 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1249.194244][ C1] sd 0:0:1:0: tag#1441 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1249.203391][ C1] sd 0:0:1:0: tag#1441 CDB[20]: ba 03:50:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:10 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x0, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1251.751899][ C0] sd 0:0:1:0: tag#1282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1251.761845][ C0] sd 0:0:1:0: tag#1282 CDB: opcode=0xe5 (vendor) [ 1251.768203][ C0] sd 0:0:1:0: tag#1282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1251.777249][ C0] sd 0:0:1:0: tag#1282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1251.786291][ C0] sd 0:0:1:0: tag#1282 CDB[20]: ba 03:50:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:12 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1252.929803][ C1] sd 0:0:1:0: tag#1445 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1252.939867][ C1] sd 0:0:1:0: tag#1445 CDB: opcode=0xe5 (vendor) [ 1252.946317][ C1] sd 0:0:1:0: tag#1445 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1252.955465][ C1] sd 0:0:1:0: tag#1445 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1252.956855][ C0] sd 0:0:1:0: tag#1316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1252.964520][ C1] sd 0:0:1:0: tag#1445 CDB[20]: ba 03:50:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1252.974315][ C0] sd 0:0:1:0: tag#1316 CDB: opcode=0xe5 (vendor) [ 1252.985729][ C0] sd 0:0:1:0: tag#1316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1252.994776][ C0] sd 0:0:1:0: tag#1316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1253.003808][ C0] sd 0:0:1:0: tag#1316 CDB[20]: ba [ 1253.134694][ C0] sd 0:0:1:0: tag#1329 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1253.144592][ C0] sd 0:0:1:0: tag#1329 CDB: opcode=0xe5 (vendor) [ 1253.150942][ C0] sd 0:0:1:0: tag#1329 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1253.159982][ C0] sd 0:0:1:0: tag#1329 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1253.169129][ C0] sd 0:0:1:0: tag#1329 CDB[20]: ba 03:50:14 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1254.814850][ C0] sd 0:0:1:0: tag#1448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1254.822348][ C1] sd 0:0:1:0: tag#1449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1254.824716][ C0] sd 0:0:1:0: tag#1448 CDB: opcode=0xe5 (vendor) [ 1254.834513][ C1] sd 0:0:1:0: tag#1449 CDB: opcode=0xe5 (vendor) [ 1254.834530][ C1] sd 0:0:1:0: tag#1449 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1254.840828][ C0] sd 0:0:1:0: tag#1448 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1254.847145][ C1] sd 0:0:1:0: tag#1449 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1254.856145][ C0] sd 0:0:1:0: tag#1448 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1254.865149][ C1] sd 0:0:1:0: tag#1449 CDB[20]: ba [ 1254.874145][ C0] sd 0:0:1:0: tag#1448 CDB[20]: ba [ 1254.910563][ C0] sd 0:0:1:0: tag#1450 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1254.920421][ C0] sd 0:0:1:0: tag#1450 CDB: opcode=0xe5 (vendor) [ 1254.926770][ C0] sd 0:0:1:0: tag#1450 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1254.935812][ C0] sd 0:0:1:0: tag#1450 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1254.944847][ C0] sd 0:0:1:0: tag#1450 CDB[20]: ba 03:50:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1256.970537][ C1] sd 0:0:1:0: tag#1455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1256.980411][ C1] sd 0:0:1:0: tag#1455 CDB: opcode=0xe5 (vendor) [ 1256.986787][ C1] sd 0:0:1:0: tag#1455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1256.995823][ C1] sd 0:0:1:0: tag#1455 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1257.004858][ C1] sd 0:0:1:0: tag#1455 CDB[20]: ba 03:50:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1257.746430][ C1] sd 0:0:1:0: tag#1456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1257.756296][ C1] sd 0:0:1:0: tag#1456 CDB: opcode=0xe5 (vendor) [ 1257.762691][ C1] sd 0:0:1:0: tag#1456 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1257.771842][ C1] sd 0:0:1:0: tag#1456 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1257.780888][ C1] sd 0:0:1:0: tag#1456 CDB[20]: ba 03:50:17 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1257.943457][ C0] sd 0:0:1:0: tag#1434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1257.953310][ C0] sd 0:0:1:0: tag#1434 CDB: opcode=0xe5 (vendor) [ 1257.959643][ C0] sd 0:0:1:0: tag#1434 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1257.968725][ C0] sd 0:0:1:0: tag#1434 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1257.977790][ C0] sd 0:0:1:0: tag#1434 CDB[20]: ba [ 1257.984160][ C1] sd 0:0:1:0: tag#1435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1257.994022][ C1] sd 0:0:1:0: tag#1435 CDB: opcode=0xe5 (vendor) [ 1258.000371][ C1] sd 0:0:1:0: tag#1435 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1258.009512][ C1] sd 0:0:1:0: tag#1435 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1258.018545][ C1] sd 0:0:1:0: tag#1435 CDB[20]: ba [ 1259.674073][ C0] sd 0:0:1:0: tag#1436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1259.683922][ C0] sd 0:0:1:0: tag#1436 CDB: opcode=0xe5 (vendor) [ 1259.690239][ C0] sd 0:0:1:0: tag#1436 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1259.699274][ C0] sd 0:0:1:0: tag#1436 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1259.708296][ C0] sd 0:0:1:0: tag#1436 CDB[20]: ba 03:50:20 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:21 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1261.720315][ C0] sd 0:0:1:0: tag#1471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1261.730193][ C0] sd 0:0:1:0: tag#1471 CDB: opcode=0xe5 (vendor) [ 1261.736547][ C0] sd 0:0:1:0: tag#1471 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1261.745598][ C0] sd 0:0:1:0: tag#1471 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1261.754644][ C0] sd 0:0:1:0: tag#1471 CDB[20]: ba 03:50:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:22 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1262.720228][ C0] sd 0:0:1:0: tag#1410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1262.730130][ C0] sd 0:0:1:0: tag#1410 CDB: opcode=0xe5 (vendor) [ 1262.736502][ C0] sd 0:0:1:0: tag#1410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1262.745555][ C0] sd 0:0:1:0: tag#1410 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1262.754609][ C0] sd 0:0:1:0: tag#1410 CDB[20]: ba [ 1262.826423][ C0] sd 0:0:1:0: tag#1411 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1262.836314][ C0] sd 0:0:1:0: tag#1411 CDB: opcode=0xe5 (vendor) [ 1262.842684][ C0] sd 0:0:1:0: tag#1411 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1262.851720][ C0] sd 0:0:1:0: tag#1411 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1262.860800][ C0] sd 0:0:1:0: tag#1411 CDB[20]: ba [ 1262.865954][ C0] sd 0:0:1:0: tag#1412 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 03:50:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1262.875776][ C0] sd 0:0:1:0: tag#1412 CDB: opcode=0xe5 (vendor) [ 1262.882128][ C0] sd 0:0:1:0: tag#1412 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1262.891178][ C0] sd 0:0:1:0: tag#1412 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1262.900212][ C0] sd 0:0:1:0: tag#1412 CDB[20]: ba 03:50:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1265.739809][ C1] sd 0:0:1:0: tag#1560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1265.749712][ C1] sd 0:0:1:0: tag#1560 CDB: opcode=0xe5 (vendor) [ 1265.756108][ C1] sd 0:0:1:0: tag#1560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1265.765190][ C1] sd 0:0:1:0: tag#1560 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1265.774299][ C1] sd 0:0:1:0: tag#1560 CDB[20]: ba 03:50:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1265.882554][ C1] sd 0:0:1:0: tag#1561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1265.892429][ C1] sd 0:0:1:0: tag#1561 CDB: opcode=0xe5 (vendor) [ 1265.898762][ C1] sd 0:0:1:0: tag#1561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1265.907839][ C1] sd 0:0:1:0: tag#1561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1265.916888][ C1] sd 0:0:1:0: tag#1561 CDB[20]: ba [ 1265.928685][ C0] sd 0:0:1:0: tag#1457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1265.938563][ C0] sd 0:0:1:0: tag#1457 CDB: opcode=0xe5 (vendor) [ 1265.944911][ C0] sd 0:0:1:0: tag#1457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1265.954042][ C0] sd 0:0:1:0: tag#1457 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1265.963077][ C0] sd 0:0:1:0: tag#1457 CDB[20]: ba 03:50:25 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1266.094656][ C1] sd 0:0:1:0: tag#1562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1266.104562][ C1] sd 0:0:1:0: tag#1562 CDB: opcode=0xe5 (vendor) [ 1266.110907][ C1] sd 0:0:1:0: tag#1562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1266.119947][ C1] sd 0:0:1:0: tag#1562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1266.128983][ C1] sd 0:0:1:0: tag#1562 CDB[20]: ba 03:50:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1267.720752][ C0] sd 0:0:1:0: tag#1459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1267.730632][ C0] sd 0:0:1:0: tag#1459 CDB: opcode=0xe5 (vendor) [ 1267.736983][ C0] sd 0:0:1:0: tag#1459 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1267.746041][ C0] sd 0:0:1:0: tag#1459 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1267.755073][ C0] sd 0:0:1:0: tag#1459 CDB[20]: ba [ 1267.778105][ C1] sd 0:0:1:0: tag#1567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1267.787971][ C1] sd 0:0:1:0: tag#1567 CDB: opcode=0xe5 (vendor) [ 1267.794327][ C1] sd 0:0:1:0: tag#1567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1267.803379][ C1] sd 0:0:1:0: tag#1567 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1267.812410][ C1] sd 0:0:1:0: tag#1567 CDB[20]: ba 03:50:27 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:28 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1268.622506][ C1] sd 0:0:1:0: tag#1563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1268.632382][ C1] sd 0:0:1:0: tag#1563 CDB: opcode=0xe5 (vendor) [ 1268.638725][ C1] sd 0:0:1:0: tag#1563 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1268.647940][ C1] sd 0:0:1:0: tag#1563 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1268.656982][ C1] sd 0:0:1:0: tag#1563 CDB[20]: ba [ 1268.664138][ C1] sd 0:0:1:0: tag#1564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1268.667115][ C0] sd 0:0:1:0: tag#1460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1268.673992][ C1] sd 0:0:1:0: tag#1564 CDB: opcode=0xe5 (vendor) [ 1268.683766][ C0] sd 0:0:1:0: tag#1460 CDB: opcode=0xe5 (vendor) [ 1268.690091][ C1] sd 0:0:1:0: tag#1564 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1268.696584][ C0] sd 0:0:1:0: tag#1460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1268.705583][ C1] sd 0:0:1:0: tag#1564 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1268.714586][ C0] sd 0:0:1:0: tag#1460 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1268.723599][ C1] sd 0:0:1:0: tag#1564 CDB[20]: ba [ 1268.732600][ C0] sd 0:0:1:0: tag#1460 CDB[20]: ba 03:50:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:30 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1270.721963][ C1] sd 0:0:1:0: tag#1565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1270.731860][ C1] sd 0:0:1:0: tag#1565 CDB: opcode=0xe5 (vendor) [ 1270.738191][ C1] sd 0:0:1:0: tag#1565 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1270.747234][ C1] sd 0:0:1:0: tag#1565 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1270.756292][ C1] sd 0:0:1:0: tag#1565 CDB[20]: ba [ 1271.759222][ C0] sd 0:0:1:0: tag#1446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1271.769100][ C0] sd 0:0:1:0: tag#1446 CDB: opcode=0xe5 (vendor) [ 1271.775447][ C0] sd 0:0:1:0: tag#1446 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1271.784485][ C0] sd 0:0:1:0: tag#1446 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1271.793602][ C0] sd 0:0:1:0: tag#1446 CDB[20]: ba 03:50:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x0, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1271.892307][ C1] sd 0:0:1:0: tag#1566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1271.900725][ C0] sd 0:0:1:0: tag#1447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1271.902161][ C1] sd 0:0:1:0: tag#1566 CDB: opcode=0xe5 (vendor) [ 1271.911951][ C0] sd 0:0:1:0: tag#1447 CDB: opcode=0xe5 (vendor) [ 1271.918279][ C1] sd 0:0:1:0: tag#1566 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1271.918298][ C1] sd 0:0:1:0: tag#1566 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1271.924612][ C0] sd 0:0:1:0: tag#1447 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1271.933665][ C1] sd 0:0:1:0: tag#1566 CDB[20]: ba [ 1271.942646][ C0] sd 0:0:1:0: tag#1447 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1271.965754][ C0] sd 0:0:1:0: tag#1447 CDB[20]: ba 03:50:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1272.083267][ C0] sd 0:0:1:0: tag#1448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1272.093220][ C0] sd 0:0:1:0: tag#1448 CDB: opcode=0xe5 (vendor) [ 1272.094702][ C1] sd 0:0:1:0: tag#1567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1272.099579][ C0] sd 0:0:1:0: tag#1448 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1272.109388][ C1] sd 0:0:1:0: tag#1567 CDB: opcode=0xe5 (vendor) [ 1272.118389][ C0] sd 0:0:1:0: tag#1448 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:50:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1272.124716][ C1] sd 0:0:1:0: tag#1567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1272.133731][ C0] sd 0:0:1:0: tag#1448 CDB[20]: ba [ 1272.147851][ C1] sd 0:0:1:0: tag#1567 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1272.157008][ C1] sd 0:0:1:0: tag#1567 CDB[20]: ba 03:50:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1274.249640][ C1] sd 0:0:1:0: tag#1572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1274.259517][ C1] sd 0:0:1:0: tag#1572 CDB: opcode=0xe5 (vendor) [ 1274.265868][ C1] sd 0:0:1:0: tag#1572 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1274.274906][ C1] sd 0:0:1:0: tag#1572 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1274.283963][ C1] sd 0:0:1:0: tag#1572 CDB[20]: ba [ 1274.312977][ C1] sd 0:0:1:0: tag#1573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1274.322832][ C1] sd 0:0:1:0: tag#1573 CDB: opcode=0xe5 (vendor) [ 1274.329178][ C1] sd 0:0:1:0: tag#1573 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1274.338218][ C1] sd 0:0:1:0: tag#1573 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1274.347685][ C1] sd 0:0:1:0: tag#1573 CDB[20]: ba 03:50:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:35 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1276.747335][ C0] sd 0:0:1:0: tag#1459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1276.757365][ C0] sd 0:0:1:0: tag#1459 CDB: opcode=0xe5 (vendor) [ 1276.763709][ C0] sd 0:0:1:0: tag#1459 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1276.772736][ C0] sd 0:0:1:0: tag#1459 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1276.781755][ C0] sd 0:0:1:0: tag#1459 CDB[20]: ba 03:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1276.825700][ C0] sd 0:0:1:0: tag#1460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1276.835584][ C0] sd 0:0:1:0: tag#1460 CDB: opcode=0xe5 (vendor) [ 1276.841947][ C0] sd 0:0:1:0: tag#1460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1276.851024][ C0] sd 0:0:1:0: tag#1460 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1276.860073][ C0] sd 0:0:1:0: tag#1460 CDB[20]: ba 03:50:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1276.936059][ C0] sd 0:0:1:0: tag#1461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1276.945945][ C0] sd 0:0:1:0: tag#1461 CDB: opcode=0xe5 (vendor) [ 1276.952294][ C0] sd 0:0:1:0: tag#1461 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1276.961380][ C0] sd 0:0:1:0: tag#1461 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1276.970423][ C0] sd 0:0:1:0: tag#1461 CDB[20]: ba 03:50:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1277.074515][ C1] sd 0:0:1:0: tag#1462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1277.084880][ C1] sd 0:0:1:0: tag#1462 CDB: opcode=0xe5 (vendor) [ 1277.091219][ C1] sd 0:0:1:0: tag#1462 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1277.100319][ C1] sd 0:0:1:0: tag#1462 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1277.105605][ C0] sd 0:0:1:0: tag#1463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1277.109377][ C1] sd 0:0:1:0: tag#1462 CDB[20]: ba 03:50:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x15, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1277.119154][ C0] sd 0:0:1:0: tag#1463 CDB: opcode=0xe5 (vendor) [ 1277.130644][ C0] sd 0:0:1:0: tag#1463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1277.139690][ C0] sd 0:0:1:0: tag#1463 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1277.146778][ C1] sd 0:0:1:0: tag#1464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1277.148731][ C0] sd 0:0:1:0: tag#1463 CDB[20]: ba [ 1277.158521][ C1] sd 0:0:1:0: tag#1464 CDB: opcode=0xe5 (vendor) [ 1277.169932][ C1] sd 0:0:1:0: tag#1464 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1277.178998][ C1] sd 0:0:1:0: tag#1464 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1277.188045][ C1] sd 0:0:1:0: tag#1464 CDB[20]: ba 03:50:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:38 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x16, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b858", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1278.718083][ C0] sd 0:0:1:0: tag#1465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1278.727958][ C0] sd 0:0:1:0: tag#1465 CDB: opcode=0xe5 (vendor) [ 1278.734307][ C0] sd 0:0:1:0: tag#1465 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1278.743350][ C0] sd 0:0:1:0: tag#1465 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1278.752401][ C0] sd 0:0:1:0: tag#1465 CDB[20]: ba 03:50:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1279.852105][ C0] sd 0:0:1:0: tag#1470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1279.861961][ C0] sd 0:0:1:0: tag#1470 CDB: opcode=0xe5 (vendor) [ 1279.868302][ C0] sd 0:0:1:0: tag#1470 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1279.877349][ C0] sd 0:0:1:0: tag#1470 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1279.886399][ C0] sd 0:0:1:0: tag#1470 CDB[20]: ba 03:50:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1279.909110][ C1] sd 0:0:1:0: tag#1433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1279.918997][ C1] sd 0:0:1:0: tag#1433 CDB: opcode=0xe5 (vendor) [ 1279.925378][ C1] sd 0:0:1:0: tag#1433 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1279.934427][ C1] sd 0:0:1:0: tag#1433 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1279.943460][ C1] sd 0:0:1:0: tag#1433 CDB[20]: ba [ 1279.994871][ C1] sd 0:0:1:0: tag#1434 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1280.004743][ C1] sd 0:0:1:0: tag#1434 CDB: opcode=0xe5 (vendor) [ 1280.011092][ C1] sd 0:0:1:0: tag#1434 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1280.020137][ C1] sd 0:0:1:0: tag#1434 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1280.029201][ C1] sd 0:0:1:0: tag#1434 CDB[20]: ba 03:50:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:41 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x16, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b858", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1281.720861][ C0] sd 0:0:1:0: tag#1463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1281.730723][ C0] sd 0:0:1:0: tag#1463 CDB: opcode=0xe5 (vendor) [ 1281.737068][ C0] sd 0:0:1:0: tag#1463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1281.746119][ C0] sd 0:0:1:0: tag#1463 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1281.755162][ C0] sd 0:0:1:0: tag#1463 CDB[20]: ba [ 1281.773724][ C1] sd 0:0:1:0: tag#1464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1281.783603][ C1] sd 0:0:1:0: tag#1464 CDB: opcode=0xe5 (vendor) [ 1281.789928][ C1] sd 0:0:1:0: tag#1464 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1281.798985][ C1] sd 0:0:1:0: tag#1464 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1281.808020][ C1] sd 0:0:1:0: tag#1464 CDB[20]: ba 03:50:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:43 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x16, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b858", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x0, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1283.813979][ C0] sd 0:0:1:0: tag#1469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1283.824373][ C0] sd 0:0:1:0: tag#1469 CDB: opcode=0xe5 (vendor) [ 1283.830720][ C0] sd 0:0:1:0: tag#1469 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1283.839764][ C0] sd 0:0:1:0: tag#1469 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1283.848799][ C0] sd 0:0:1:0: tag#1469 CDB[20]: ba [ 1283.950523][ C1] sd 0:0:1:0: tag#1408 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1283.960409][ C1] sd 0:0:1:0: tag#1408 CDB: opcode=0xe5 (vendor) [ 1283.966758][ C1] sd 0:0:1:0: tag#1408 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1283.975807][ C1] sd 0:0:1:0: tag#1408 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1283.984844][ C1] sd 0:0:1:0: tag#1408 CDB[20]: ba [ 1285.672431][ C0] sd 0:0:1:0: tag#1471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1285.682371][ C0] sd 0:0:1:0: tag#1471 CDB: opcode=0xe5 (vendor) [ 1285.688704][ C0] sd 0:0:1:0: tag#1471 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1285.697755][ C0] sd 0:0:1:0: tag#1471 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1285.707090][ C0] sd 0:0:1:0: tag#1471 CDB[20]: ba 03:50:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1286.815856][ C1] sd 0:0:1:0: tag#1409 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1286.825747][ C1] sd 0:0:1:0: tag#1409 CDB: opcode=0xe5 (vendor) [ 1286.832091][ C1] sd 0:0:1:0: tag#1409 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1286.841210][ C1] sd 0:0:1:0: tag#1409 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1286.850282][ C1] sd 0:0:1:0: tag#1409 CDB[20]: ba 03:50:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(0x0, 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x0, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1286.961998][ C0] sd 0:0:1:0: tag#1446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1286.971820][ C0] sd 0:0:1:0: tag#1446 CDB: opcode=0xe5 (vendor) [ 1286.978144][ C0] sd 0:0:1:0: tag#1446 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1286.989411][ C0] sd 0:0:1:0: tag#1446 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1286.998420][ C0] sd 0:0:1:0: tag#1446 CDB[20]: ba 03:50:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1287.035641][ C1] sd 0:0:1:0: tag#1447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1287.045622][ C1] sd 0:0:1:0: tag#1447 CDB: opcode=0xe5 (vendor) [ 1287.051972][ C1] sd 0:0:1:0: tag#1447 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1287.057830][ C0] sd 0:0:1:0: tag#1448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1287.061000][ C1] sd 0:0:1:0: tag#1447 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1287.070782][ C0] sd 0:0:1:0: tag#1448 CDB: opcode=0xe5 (vendor) [ 1287.079785][ C1] sd 0:0:1:0: tag#1447 CDB[20]: ba [ 1287.091292][ C0] sd 0:0:1:0: tag#1448 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1287.100418][ C0] sd 0:0:1:0: tag#1448 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1287.109453][ C0] sd 0:0:1:0: tag#1448 CDB[20]: ba [ 1288.662843][ C0] sd 0:0:1:0: tag#1449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1288.672731][ C0] sd 0:0:1:0: tag#1449 CDB: opcode=0xe5 (vendor) [ 1288.679095][ C0] sd 0:0:1:0: tag#1449 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1288.688175][ C0] sd 0:0:1:0: tag#1449 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1288.697422][ C0] sd 0:0:1:0: tag#1449 CDB[20]: ba 03:50:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(0x0, 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:48 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1289.201393][ C1] sd 0:0:1:0: tag#1454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1289.211288][ C1] sd 0:0:1:0: tag#1454 CDB: opcode=0xe5 (vendor) [ 1289.217637][ C1] sd 0:0:1:0: tag#1454 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1289.226946][ C1] sd 0:0:1:0: tag#1454 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1289.236098][ C1] sd 0:0:1:0: tag#1454 CDB[20]: ba 03:50:49 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(0x0, 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1289.347881][ C1] sd 0:0:1:0: tag#1462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1289.357832][ C1] sd 0:0:1:0: tag#1462 CDB: opcode=0xe5 (vendor) [ 1289.364193][ C1] sd 0:0:1:0: tag#1462 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1289.373253][ C1] sd 0:0:1:0: tag#1462 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1289.373450][ C0] sd 0:0:1:0: tag#1410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1289.382279][ C1] sd 0:0:1:0: tag#1462 CDB[20]: ba [ 1289.392080][ C0] sd 0:0:1:0: tag#1410 CDB: opcode=0xe5 (vendor) [ 1289.403491][ C0] sd 0:0:1:0: tag#1410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1289.412550][ C0] sd 0:0:1:0: tag#1410 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1289.421568][ C0] sd 0:0:1:0: tag#1410 CDB[20]: ba [ 1289.556637][ C1] sd 0:0:1:0: tag#1444 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1289.566529][ C1] sd 0:0:1:0: tag#1444 CDB: opcode=0xe5 (vendor) [ 1289.572934][ C1] sd 0:0:1:0: tag#1444 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1289.581996][ C1] sd 0:0:1:0: tag#1444 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1289.591037][ C1] sd 0:0:1:0: tag#1444 CDB[20]: ba 03:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x0, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1291.779579][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 1291.779596][ C0] sd 0:0:1:0: tag#1503 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1291.796012][ C0] sd 0:0:1:0: tag#1503 CDB: opcode=0xe5 (vendor) [ 1291.802355][ C0] sd 0:0:1:0: tag#1503 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1291.811410][ C0] sd 0:0:1:0: tag#1503 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1291.820425][ C0] sd 0:0:1:0: tag#1503 CDB[20]: ba 03:50:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:52 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1292.840150][ C1] sd 0:0:1:0: tag#1659 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1292.850069][ C1] sd 0:0:1:0: tag#1659 CDB: opcode=0xe5 (vendor) [ 1292.856437][ C1] sd 0:0:1:0: tag#1659 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1292.865572][ C1] sd 0:0:1:0: tag#1659 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1292.874703][ C1] sd 0:0:1:0: tag#1659 CDB[20]: ba [ 1292.883724][ C0] sd 0:0:1:0: tag#1472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1292.893570][ C0] sd 0:0:1:0: tag#1472 CDB: opcode=0xe5 (vendor) [ 1292.899917][ C0] sd 0:0:1:0: tag#1472 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1292.908979][ C0] sd 0:0:1:0: tag#1472 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1292.918009][ C0] sd 0:0:1:0: tag#1472 CDB[20]: ba [ 1292.939144][ C0] sd 0:0:1:0: tag#1473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1292.949016][ C0] sd 0:0:1:0: tag#1473 CDB: opcode=0xe5 (vendor) [ 1292.955369][ C0] sd 0:0:1:0: tag#1473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1292.964415][ C0] sd 0:0:1:0: tag#1473 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1292.973452][ C0] sd 0:0:1:0: tag#1473 CDB[20]: ba [ 1294.677615][ C1] sd 0:0:1:0: tag#1660 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1294.687475][ C1] sd 0:0:1:0: tag#1660 CDB: opcode=0xe5 (vendor) [ 1294.694009][ C1] sd 0:0:1:0: tag#1660 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1294.703141][ C1] sd 0:0:1:0: tag#1660 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1294.712265][ C1] sd 0:0:1:0: tag#1660 CDB[20]: ba 03:50:56 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1296.723792][ C1] sd 0:0:1:0: tag#1604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1296.733726][ C1] sd 0:0:1:0: tag#1604 CDB: opcode=0xe5 (vendor) [ 1296.740105][ C1] sd 0:0:1:0: tag#1604 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1296.749267][ C1] sd 0:0:1:0: tag#1604 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1296.758310][ C1] sd 0:0:1:0: tag#1604 CDB[20]: ba 03:50:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x0, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1296.843645][ C0] sd 0:0:1:0: tag#1524 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1296.853499][ C0] sd 0:0:1:0: tag#1524 CDB: opcode=0xe5 (vendor) [ 1296.859845][ C0] sd 0:0:1:0: tag#1524 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1296.868885][ C0] sd 0:0:1:0: tag#1524 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1296.877932][ C0] sd 0:0:1:0: tag#1524 CDB[20]: ba 03:50:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1296.981090][ C0] sd 0:0:1:0: tag#1525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1296.990955][ C0] sd 0:0:1:0: tag#1525 CDB: opcode=0xe5 (vendor) [ 1296.997308][ C0] sd 0:0:1:0: tag#1525 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1297.000735][ C1] sd 0:0:1:0: tag#1605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1297.006356][ C0] sd 0:0:1:0: tag#1525 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1297.016162][ C1] sd 0:0:1:0: tag#1605 CDB: opcode=0xe5 (vendor) [ 1297.025177][ C0] sd 0:0:1:0: tag#1525 CDB[20]: ba [ 1297.036710][ C1] sd 0:0:1:0: tag#1605 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1297.045756][ C1] sd 0:0:1:0: tag#1605 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1297.054893][ C1] sd 0:0:1:0: tag#1605 CDB[20]: ba 03:50:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:58 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:50:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x0, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1299.663627][ C0] sd 0:0:1:0: tag#1526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1299.668615][ C1] sd 0:0:1:0: tag#1606 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1299.673509][ C0] sd 0:0:1:0: tag#1526 CDB: opcode=0xe5 (vendor) [ 1299.683291][ C1] sd 0:0:1:0: tag#1606 CDB: opcode=0xe5 (vendor) [ 1299.689600][ C0] sd 0:0:1:0: tag#1526 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1299.695949][ C1] sd 0:0:1:0: tag#1606 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1299.704983][ C0] sd 0:0:1:0: tag#1526 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1299.713997][ C1] sd 0:0:1:0: tag#1606 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1299.723001][ C0] sd 0:0:1:0: tag#1526 CDB[20]: ba [ 1299.737123][ C1] sd 0:0:1:0: tag#1606 CDB[20]: ba 03:51:00 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1300.743481][ C1] sd 0:0:1:0: tag#1611 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1300.753347][ C1] sd 0:0:1:0: tag#1611 CDB: opcode=0xe5 (vendor) [ 1300.759696][ C1] sd 0:0:1:0: tag#1611 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1300.768764][ C1] sd 0:0:1:0: tag#1611 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1300.777828][ C1] sd 0:0:1:0: tag#1611 CDB[20]: ba 03:51:00 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x0, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1300.943714][ C1] sd 0:0:1:0: tag#1612 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1300.953582][ C1] sd 0:0:1:0: tag#1612 CDB: opcode=0xe5 (vendor) [ 1300.959932][ C1] sd 0:0:1:0: tag#1612 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1300.969039][ C1] sd 0:0:1:0: tag#1612 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1300.978090][ C1] sd 0:0:1:0: tag#1612 CDB[20]: ba [ 1300.984962][ C0] sd 0:0:1:0: tag#1527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1300.994831][ C0] sd 0:0:1:0: tag#1527 CDB: opcode=0xe5 (vendor) [ 1301.001193][ C0] sd 0:0:1:0: tag#1527 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1301.010237][ C0] sd 0:0:1:0: tag#1527 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1301.019277][ C0] sd 0:0:1:0: tag#1527 CDB[20]: ba [ 1301.041513][ C0] sd 0:0:1:0: tag#1528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1301.051379][ C0] sd 0:0:1:0: tag#1528 CDB: opcode=0xe5 (vendor) [ 1301.057744][ C0] sd 0:0:1:0: tag#1528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1301.066797][ C0] sd 0:0:1:0: tag#1528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1301.075847][ C0] sd 0:0:1:0: tag#1528 CDB[20]: ba [ 1302.673833][ C0] sd 0:0:1:0: tag#1529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1302.683907][ C0] sd 0:0:1:0: tag#1529 CDB: opcode=0xe5 (vendor) [ 1302.690252][ C0] sd 0:0:1:0: tag#1529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1302.699306][ C0] sd 0:0:1:0: tag#1529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1302.708344][ C0] sd 0:0:1:0: tag#1529 CDB[20]: ba 03:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1304.721409][ C1] sd 0:0:1:0: tag#1615 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1304.731283][ C1] sd 0:0:1:0: tag#1615 CDB: opcode=0xe5 (vendor) [ 1304.737728][ C1] sd 0:0:1:0: tag#1615 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1304.746954][ C1] sd 0:0:1:0: tag#1615 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1304.756378][ C1] sd 0:0:1:0: tag#1615 CDB[20]: ba 03:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1304.836479][ C1] sd 0:0:1:0: tag#1622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1304.846347][ C1] sd 0:0:1:0: tag#1622 CDB: opcode=0xe5 (vendor) [ 1304.852725][ C1] sd 0:0:1:0: tag#1622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1304.861847][ C1] sd 0:0:1:0: tag#1622 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1304.870871][ C1] sd 0:0:1:0: tag#1622 CDB[20]: ba 03:51:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x0, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1304.956535][ C0] sd 0:0:1:0: tag#1474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1304.966513][ C0] sd 0:0:1:0: tag#1474 CDB: opcode=0xe5 (vendor) [ 1304.971616][ C1] sd 0:0:1:0: tag#1475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1304.972856][ C0] sd 0:0:1:0: tag#1474 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1304.982689][ C1] sd 0:0:1:0: tag#1475 CDB: opcode=0xe5 (vendor) [ 1304.991663][ C0] sd 0:0:1:0: tag#1474 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:51:04 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1304.997971][ C1] sd 0:0:1:0: tag#1475 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1305.006972][ C0] sd 0:0:1:0: tag#1474 CDB[20]: ba [ 1305.015986][ C1] sd 0:0:1:0: tag#1475 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1305.030098][ C1] sd 0:0:1:0: tag#1475 CDB[20]: ba [ 1305.066476][ C1] sd 0:0:1:0: tag#1476 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1305.076351][ C1] sd 0:0:1:0: tag#1476 CDB: opcode=0xe5 (vendor) [ 1305.082694][ C1] sd 0:0:1:0: tag#1476 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1305.091741][ C1] sd 0:0:1:0: tag#1476 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1305.100881][ C1] sd 0:0:1:0: tag#1476 CDB[20]: ba [ 1306.727611][ C1] sd 0:0:1:0: tag#1478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1306.737769][ C1] sd 0:0:1:0: tag#1478 CDB: opcode=0xe5 (vendor) [ 1306.744149][ C1] sd 0:0:1:0: tag#1478 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1306.753200][ C1] sd 0:0:1:0: tag#1478 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1306.762234][ C1] sd 0:0:1:0: tag#1478 CDB[20]: ba 03:51:08 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1308.759438][ C1] sd 0:0:1:0: tag#1480 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1308.769325][ C1] sd 0:0:1:0: tag#1480 CDB: opcode=0xe5 (vendor) [ 1308.775728][ C1] sd 0:0:1:0: tag#1480 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1308.784769][ C1] sd 0:0:1:0: tag#1480 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1308.793814][ C1] sd 0:0:1:0: tag#1480 CDB[20]: ba 03:51:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1308.819201][ C0] sd 0:0:1:0: tag#1483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1308.829067][ C0] sd 0:0:1:0: tag#1483 CDB: opcode=0xe5 (vendor) [ 1308.835429][ C0] sd 0:0:1:0: tag#1483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1308.844473][ C0] sd 0:0:1:0: tag#1483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1308.853533][ C0] sd 0:0:1:0: tag#1483 CDB[20]: ba 03:51:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1308.932675][ C0] sd 0:0:1:0: tag#1484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1308.942574][ C0] sd 0:0:1:0: tag#1484 CDB: opcode=0xe5 (vendor) [ 1308.948963][ C0] sd 0:0:1:0: tag#1484 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1308.958017][ C0] sd 0:0:1:0: tag#1484 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1308.967069][ C0] sd 0:0:1:0: tag#1484 CDB[20]: ba [ 1309.001877][ C0] sd 0:0:1:0: tag#1485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1309.011910][ C0] sd 0:0:1:0: tag#1485 CDB: opcode=0xe5 (vendor) [ 1309.018270][ C0] sd 0:0:1:0: tag#1485 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1309.027324][ C0] sd 0:0:1:0: tag#1485 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1309.036362][ C0] sd 0:0:1:0: tag#1485 CDB[20]: ba [ 1309.150361][ C0] sd 0:0:1:0: tag#1522 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1309.160210][ C0] sd 0:0:1:0: tag#1522 CDB: opcode=0xe5 (vendor) [ 1309.166567][ C0] sd 0:0:1:0: tag#1522 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1309.175624][ C0] sd 0:0:1:0: tag#1522 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1309.184654][ C0] sd 0:0:1:0: tag#1522 CDB[20]: ba 03:51:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:08 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x0, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1309.331873][ C0] sd 0:0:1:0: tag#1530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1309.341740][ C0] sd 0:0:1:0: tag#1530 CDB: opcode=0xe5 (vendor) [ 1309.348094][ C0] sd 0:0:1:0: tag#1530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1309.357136][ C0] sd 0:0:1:0: tag#1530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1309.366159][ C0] sd 0:0:1:0: tag#1530 CDB[20]: ba [ 1309.533968][ C1] sd 0:0:1:0: tag#1502 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1309.543833][ C1] sd 0:0:1:0: tag#1502 CDB: opcode=0xe5 (vendor) [ 1309.550165][ C1] sd 0:0:1:0: tag#1502 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1309.559232][ C1] sd 0:0:1:0: tag#1502 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1309.568271][ C1] sd 0:0:1:0: tag#1502 CDB[20]: ba 03:51:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1310.721065][ C0] sd 0:0:1:0: tag#1496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1310.730934][ C0] sd 0:0:1:0: tag#1496 CDB: opcode=0xe5 (vendor) [ 1310.737282][ C0] sd 0:0:1:0: tag#1496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1310.746321][ C0] sd 0:0:1:0: tag#1496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1310.755345][ C0] sd 0:0:1:0: tag#1496 CDB[20]: ba [ 1310.791333][ C0] sd 0:0:1:0: tag#1497 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1310.801188][ C0] sd 0:0:1:0: tag#1497 CDB: opcode=0xe5 (vendor) [ 1310.807624][ C0] sd 0:0:1:0: tag#1497 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1310.816783][ C0] sd 0:0:1:0: tag#1497 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1310.825805][ C0] sd 0:0:1:0: tag#1497 CDB[20]: ba 03:51:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x0, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1310.918051][ C0] sd 0:0:1:0: tag#1498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1310.927959][ C0] sd 0:0:1:0: tag#1498 CDB: opcode=0xe5 (vendor) [ 1310.934321][ C0] sd 0:0:1:0: tag#1498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1310.943370][ C0] sd 0:0:1:0: tag#1498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1310.952413][ C0] sd 0:0:1:0: tag#1498 CDB[20]: ba 03:51:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:12 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:13 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1313.865022][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 1313.865049][ C1] sd 0:0:1:0: tag#1481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1313.881650][ C1] sd 0:0:1:0: tag#1481 CDB: opcode=0xe5 (vendor) [ 1313.887994][ C1] sd 0:0:1:0: tag#1481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1313.897042][ C1] sd 0:0:1:0: tag#1481 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1313.906083][ C1] sd 0:0:1:0: tag#1481 CDB[20]: ba 03:51:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x0, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1313.983405][ C1] sd 0:0:1:0: tag#1491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1313.993280][ C1] sd 0:0:1:0: tag#1491 CDB: opcode=0xe5 (vendor) [ 1313.999234][ C0] sd 0:0:1:0: tag#1492 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1313.999611][ C1] sd 0:0:1:0: tag#1491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1314.009619][ C0] sd 0:0:1:0: tag#1492 CDB: opcode=0xe5 (vendor) [ 1314.018639][ C1] sd 0:0:1:0: tag#1491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1314.024958][ C0] sd 0:0:1:0: tag#1492 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1314.033965][ C1] sd 0:0:1:0: tag#1491 CDB[20]: ba [ 1314.042992][ C0] sd 0:0:1:0: tag#1492 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1314.057097][ C0] sd 0:0:1:0: tag#1492 CDB[20]: ba 03:51:15 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1316.676063][ C1] sd 0:0:1:0: tag#1493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1316.685934][ C1] sd 0:0:1:0: tag#1493 CDB: opcode=0xe5 (vendor) [ 1316.692292][ C1] sd 0:0:1:0: tag#1493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1316.701319][ C1] sd 0:0:1:0: tag#1493 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1316.710394][ C1] sd 0:0:1:0: tag#1493 CDB[20]: ba [ 1316.715555][ C1] sd 0:0:1:0: tag#1494 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1316.725429][ C1] sd 0:0:1:0: tag#1494 CDB: opcode=0xe5 (vendor) [ 1316.731773][ C1] sd 0:0:1:0: tag#1494 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1316.740933][ C1] sd 0:0:1:0: tag#1494 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1316.750093][ C1] sd 0:0:1:0: tag#1494 CDB[20]: ba 03:51:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:16 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x0, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1317.017827][ C1] sd 0:0:1:0: tag#1491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1317.020023][ C0] sd 0:0:1:0: tag#1492 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1317.027681][ C1] sd 0:0:1:0: tag#1491 CDB: opcode=0xe5 (vendor) [ 1317.037469][ C0] sd 0:0:1:0: tag#1492 CDB: opcode=0xe5 (vendor) [ 1317.037488][ C0] sd 0:0:1:0: tag#1492 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1317.043810][ C1] sd 0:0:1:0: tag#1491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1317.050130][ C0] sd 0:0:1:0: tag#1492 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1317.059120][ C1] sd 0:0:1:0: tag#1491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1317.068117][ C0] sd 0:0:1:0: tag#1492 CDB[20]: ba [ 1317.077673][ C1] sd 0:0:1:0: tag#1491 CDB[20]: ba 03:51:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1319.677445][ C0] sd 0:0:1:0: tag#1493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1319.687356][ C0] sd 0:0:1:0: tag#1493 CDB: opcode=0xe5 (vendor) [ 1319.693711][ C0] sd 0:0:1:0: tag#1493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1319.702757][ C0] sd 0:0:1:0: tag#1493 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1319.711793][ C0] sd 0:0:1:0: tag#1493 CDB[20]: ba 03:51:19 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1319.750438][ C1] sd 0:0:1:0: tag#1498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1319.760329][ C1] sd 0:0:1:0: tag#1498 CDB: opcode=0xe5 (vendor) [ 1319.766722][ C1] sd 0:0:1:0: tag#1498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1319.775799][ C1] sd 0:0:1:0: tag#1498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1319.784847][ C1] sd 0:0:1:0: tag#1498 CDB[20]: ba 03:51:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1322.745834][ C0] sd 0:0:1:0: tag#1526 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1322.755708][ C0] sd 0:0:1:0: tag#1526 CDB: opcode=0xe5 (vendor) [ 1322.762065][ C0] sd 0:0:1:0: tag#1526 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1322.771088][ C0] sd 0:0:1:0: tag#1526 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1322.780138][ C0] sd 0:0:1:0: tag#1526 CDB[20]: ba 03:51:22 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1322.787281][ C1] sd 0:0:1:0: tag#1527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1322.797127][ C1] sd 0:0:1:0: tag#1527 CDB: opcode=0xe5 (vendor) [ 1322.803471][ C1] sd 0:0:1:0: tag#1527 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1322.812529][ C1] sd 0:0:1:0: tag#1527 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1322.821569][ C1] sd 0:0:1:0: tag#1527 CDB[20]: ba 03:51:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x0, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x0, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x0, &(0x7f0000000540)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1322.936317][ C1] sd 0:0:1:0: tag#1533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1322.946154][ C1] sd 0:0:1:0: tag#1533 CDB: opcode=0xe5 (vendor) [ 1322.952503][ C1] sd 0:0:1:0: tag#1533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1322.959722][ C0] sd 0:0:1:0: tag#1534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1322.961566][ C1] sd 0:0:1:0: tag#1533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:51:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x0, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1322.971383][ C0] sd 0:0:1:0: tag#1534 CDB: opcode=0xe5 (vendor) [ 1322.980739][ C1] sd 0:0:1:0: tag#1533 CDB[20]: ba [ 1322.992447][ C0] sd 0:0:1:0: tag#1534 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1323.001471][ C0] sd 0:0:1:0: tag#1534 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1323.010522][ C0] sd 0:0:1:0: tag#1534 CDB[20]: ba [ 1323.044591][ C0] sd 0:0:1:0: tag#1535 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1323.054457][ C0] sd 0:0:1:0: tag#1535 CDB: opcode=0xe5 (vendor) [ 1323.060822][ C0] sd 0:0:1:0: tag#1535 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1323.069865][ C0] sd 0:0:1:0: tag#1535 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1323.078897][ C0] sd 0:0:1:0: tag#1535 CDB[20]: ba 03:51:24 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1325.732440][ C1] sd 0:0:1:0: tag#1476 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1325.742301][ C1] sd 0:0:1:0: tag#1476 CDB: opcode=0xe5 (vendor) [ 1325.748671][ C1] sd 0:0:1:0: tag#1476 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1325.757727][ C1] sd 0:0:1:0: tag#1476 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1325.766780][ C1] sd 0:0:1:0: tag#1476 CDB[20]: ba 03:51:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x0, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:26 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1326.803979][ C1] sd 0:0:1:0: tag#1477 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1326.813857][ C1] sd 0:0:1:0: tag#1477 CDB: opcode=0xe5 (vendor) [ 1326.820195][ C1] sd 0:0:1:0: tag#1477 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1326.829245][ C1] sd 0:0:1:0: tag#1477 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1326.838288][ C1] sd 0:0:1:0: tag#1477 CDB[20]: ba 03:51:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x0, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x0, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1326.926100][ C0] sd 0:0:1:0: tag#1478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1326.931377][ C1] sd 0:0:1:0: tag#1479 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1326.935950][ C0] sd 0:0:1:0: tag#1478 CDB: opcode=0xe5 (vendor) [ 1326.935979][ C0] sd 0:0:1:0: tag#1478 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1326.945798][ C1] sd 0:0:1:0: tag#1479 CDB: opcode=0xe5 (vendor) [ 1326.952134][ C0] sd 0:0:1:0: tag#1478 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:51:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1326.961126][ C1] sd 0:0:1:0: tag#1479 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1326.967464][ C0] sd 0:0:1:0: tag#1478 CDB[20]: ba [ 1326.976471][ C1] sd 0:0:1:0: tag#1479 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1326.999637][ C1] sd 0:0:1:0: tag#1479 CDB[20]: ba [ 1328.713292][ C1] sd 0:0:1:0: tag#1480 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1328.723188][ C1] sd 0:0:1:0: tag#1480 CDB: opcode=0xe5 (vendor) [ 1328.729544][ C1] sd 0:0:1:0: tag#1480 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1328.738592][ C1] sd 0:0:1:0: tag#1480 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1328.747638][ C1] sd 0:0:1:0: tag#1480 CDB[20]: ba 03:51:28 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1329.174665][ C1] sd 0:0:1:0: tag#1481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1329.184568][ C1] sd 0:0:1:0: tag#1481 CDB: opcode=0xe5 (vendor) [ 1329.190906][ C1] sd 0:0:1:0: tag#1481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1329.199959][ C1] sd 0:0:1:0: tag#1481 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1329.209010][ C1] sd 0:0:1:0: tag#1481 CDB[20]: ba 03:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x0, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1329.323800][ C0] sd 0:0:1:0: tag#1483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1329.333775][ C0] sd 0:0:1:0: tag#1483 CDB: opcode=0xe5 (vendor) [ 1329.340107][ C0] sd 0:0:1:0: tag#1483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1329.349183][ C0] sd 0:0:1:0: tag#1483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1329.358229][ C0] sd 0:0:1:0: tag#1483 CDB[20]: ba 03:51:29 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x0, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:29 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1330.266750][ C1] sd 0:0:1:0: tag#1475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1330.276605][ C1] sd 0:0:1:0: tag#1475 CDB: opcode=0xe5 (vendor) [ 1330.282956][ C1] sd 0:0:1:0: tag#1475 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1330.292001][ C1] sd 0:0:1:0: tag#1475 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1330.301016][ C1] sd 0:0:1:0: tag#1475 CDB[20]: ba [ 1331.715607][ C0] sd 0:0:1:0: tag#1508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1331.725728][ C0] sd 0:0:1:0: tag#1508 CDB: opcode=0xe5 (vendor) [ 1331.732067][ C0] sd 0:0:1:0: tag#1508 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1331.741098][ C0] sd 0:0:1:0: tag#1508 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1331.750158][ C0] sd 0:0:1:0: tag#1508 CDB[20]: ba 03:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1332.843900][ C0] sd 0:0:1:0: tag#1500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1332.853779][ C0] sd 0:0:1:0: tag#1500 CDB: opcode=0xe5 (vendor) [ 1332.860127][ C0] sd 0:0:1:0: tag#1500 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1332.869171][ C0] sd 0:0:1:0: tag#1500 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1332.878220][ C0] sd 0:0:1:0: tag#1500 CDB[20]: ba 03:51:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x0, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1332.965487][ C0] sd 0:0:1:0: tag#1482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1332.975343][ C0] sd 0:0:1:0: tag#1482 CDB: opcode=0xe5 (vendor) [ 1332.981687][ C0] sd 0:0:1:0: tag#1482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1332.990730][ C0] sd 0:0:1:0: tag#1482 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1332.999764][ C0] sd 0:0:1:0: tag#1482 CDB[20]: ba [ 1333.024409][ C1] sd 0:0:1:0: tag#1483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1333.034282][ C1] sd 0:0:1:0: tag#1483 CDB: opcode=0xe5 (vendor) [ 1333.040640][ C1] sd 0:0:1:0: tag#1483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1333.049720][ C1] sd 0:0:1:0: tag#1483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1333.058859][ C1] sd 0:0:1:0: tag#1483 CDB[20]: ba [ 1334.712970][ C0] sd 0:0:1:0: tag#1484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1334.722830][ C0] sd 0:0:1:0: tag#1484 CDB: opcode=0xe5 (vendor) [ 1334.729177][ C0] sd 0:0:1:0: tag#1484 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1334.738226][ C0] sd 0:0:1:0: tag#1484 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1334.747294][ C0] sd 0:0:1:0: tag#1484 CDB[20]: ba [ 1335.132787][ C0] sd 0:0:1:0: tag#1486 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1335.142666][ C0] sd 0:0:1:0: tag#1486 CDB: opcode=0xe5 (vendor) [ 1335.149031][ C0] sd 0:0:1:0: tag#1486 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1335.158093][ C0] sd 0:0:1:0: tag#1486 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1335.167172][ C0] sd 0:0:1:0: tag#1486 CDB[20]: ba 03:51:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x0, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:35 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x0, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1335.615563][ C0] sd 0:0:1:0: tag#1506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1335.625425][ C0] sd 0:0:1:0: tag#1506 CDB: opcode=0xe5 (vendor) [ 1335.631756][ C0] sd 0:0:1:0: tag#1506 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1335.640805][ C0] sd 0:0:1:0: tag#1506 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1335.644256][ C1] sd 0:0:1:0: tag#1507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1335.649853][ C0] sd 0:0:1:0: tag#1506 CDB[20]: ba [ 1335.659817][ C1] sd 0:0:1:0: tag#1507 CDB: opcode=0xe5 (vendor) [ 1335.671224][ C1] sd 0:0:1:0: tag#1507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1335.674321][ C0] sd 0:0:1:0: tag#1508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1335.680310][ C1] sd 0:0:1:0: tag#1507 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1335.690085][ C0] sd 0:0:1:0: tag#1508 CDB: opcode=0xe5 (vendor) [ 1335.699088][ C1] sd 0:0:1:0: tag#1507 CDB[20]: ba 03:51:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x0, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1335.710510][ C0] sd 0:0:1:0: tag#1508 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1335.719605][ C0] sd 0:0:1:0: tag#1508 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1335.728667][ C0] sd 0:0:1:0: tag#1508 CDB[20]: ba [ 1335.733810][ C1] sd 0:0:1:0: tag#1509 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1335.743668][ C1] sd 0:0:1:0: tag#1509 CDB: opcode=0xe5 (vendor) [ 1335.749992][ C1] sd 0:0:1:0: tag#1509 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1335.759039][ C1] sd 0:0:1:0: tag#1509 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1335.768185][ C1] sd 0:0:1:0: tag#1509 CDB[20]: ba 03:51:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x0, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1338.723473][ C1] sd 0:0:1:0: tag#1494 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1338.726752][ C0] sd 0:0:1:0: tag#1495 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1338.733339][ C1] sd 0:0:1:0: tag#1494 CDB: opcode=0xe5 (vendor) [ 1338.743134][ C0] sd 0:0:1:0: tag#1495 CDB: opcode=0xe5 (vendor) [ 1338.749785][ C1] sd 0:0:1:0: tag#1494 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1338.756093][ C0] sd 0:0:1:0: tag#1495 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1338.765095][ C1] sd 0:0:1:0: tag#1494 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1338.774116][ C0] sd 0:0:1:0: tag#1495 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1338.783127][ C1] sd 0:0:1:0: tag#1494 CDB[20]: ba [ 1338.792121][ C0] sd 0:0:1:0: tag#1495 CDB[20]: ba 03:51:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x0, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1338.880632][ C1] sd 0:0:1:0: tag#1496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1338.890494][ C1] sd 0:0:1:0: tag#1496 CDB: opcode=0xe5 (vendor) [ 1338.896869][ C1] sd 0:0:1:0: tag#1496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1338.905953][ C1] sd 0:0:1:0: tag#1496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1338.914995][ C1] sd 0:0:1:0: tag#1496 CDB[20]: ba [ 1338.923928][ C0] sd 0:0:1:0: tag#1497 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1338.933753][ C0] sd 0:0:1:0: tag#1497 CDB: opcode=0xe5 (vendor) [ 1338.940206][ C0] sd 0:0:1:0: tag#1497 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1338.949230][ C0] sd 0:0:1:0: tag#1497 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1338.958337][ C0] sd 0:0:1:0: tag#1497 CDB[20]: ba 03:51:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x0, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1339.035411][ C1] sd 0:0:1:0: tag#1498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1339.045298][ C1] sd 0:0:1:0: tag#1498 CDB: opcode=0xe5 (vendor) [ 1339.051646][ C1] sd 0:0:1:0: tag#1498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1339.060706][ C1] sd 0:0:1:0: tag#1498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1339.069741][ C1] sd 0:0:1:0: tag#1498 CDB[20]: ba 03:51:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1341.151959][ C1] sd 0:0:1:0: tag#1499 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1341.161941][ C1] sd 0:0:1:0: tag#1499 CDB: opcode=0xe5 (vendor) [ 1341.168449][ C1] sd 0:0:1:0: tag#1499 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1341.177498][ C1] sd 0:0:1:0: tag#1499 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1341.186549][ C1] sd 0:0:1:0: tag#1499 CDB[20]: ba 03:51:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x0, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:40 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1341.198856][ C0] sd 0:0:1:0: tag#1532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1341.209526][ C0] sd 0:0:1:0: tag#1532 CDB: opcode=0xe5 (vendor) [ 1341.215970][ C0] sd 0:0:1:0: tag#1532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1341.225115][ C0] sd 0:0:1:0: tag#1532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1341.234152][ C0] sd 0:0:1:0: tag#1532 CDB[20]: ba 03:51:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x0, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x0, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1341.329042][ C0] sd 0:0:1:0: tag#1472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1341.338924][ C0] sd 0:0:1:0: tag#1472 CDB: opcode=0xe5 (vendor) [ 1341.345281][ C0] sd 0:0:1:0: tag#1472 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1341.354376][ C0] sd 0:0:1:0: tag#1472 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1341.363422][ C0] sd 0:0:1:0: tag#1472 CDB[20]: ba [ 1341.401605][ C0] sd 0:0:1:0: tag#1513 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1341.411989][ C0] sd 0:0:1:0: tag#1513 CDB: opcode=0xe5 (vendor) [ 1341.418321][ C0] sd 0:0:1:0: tag#1513 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1341.427374][ C0] sd 0:0:1:0: tag#1513 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1341.436521][ C0] sd 0:0:1:0: tag#1513 CDB[20]: ba [ 1341.441671][ C0] sd 0:0:1:0: tag#1531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1341.451486][ C0] sd 0:0:1:0: tag#1531 CDB: opcode=0xe5 (vendor) [ 1341.457852][ C0] sd 0:0:1:0: tag#1531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1341.466930][ C0] sd 0:0:1:0: tag#1531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1341.475966][ C0] sd 0:0:1:0: tag#1531 CDB[20]: ba 03:51:41 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x0, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:46 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1346.890748][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 1346.890795][ C0] sd 0:0:1:0: tag#1664 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1346.897081][ C1] sd 0:0:1:0: tag#1665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1346.897431][ C0] sd 0:0:1:0: tag#1664 CDB: opcode=0xe5 (vendor) [ 1346.907212][ C1] sd 0:0:1:0: tag#1665 CDB: opcode=0xe5 (vendor) [ 1346.916991][ C0] sd 0:0:1:0: tag#1664 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1346.923316][ C1] sd 0:0:1:0: tag#1665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1346.929630][ C0] sd 0:0:1:0: tag#1664 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1346.938632][ C1] sd 0:0:1:0: tag#1665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1346.947743][ C0] sd 0:0:1:0: tag#1664 CDB[20]: ba [ 1346.967115][ C0] sd 0:0:1:0: tag#1666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1346.970897][ C1] sd 0:0:1:0: tag#1665 CDB[20]: ba 03:51:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1346.985841][ C0] sd 0:0:1:0: tag#1666 CDB: opcode=0xe5 (vendor) [ 1346.992199][ C0] sd 0:0:1:0: tag#1666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1347.001217][ C0] sd 0:0:1:0: tag#1666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1347.008557][ C1] sd 0:0:1:0: tag#1667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1347.010270][ C0] sd 0:0:1:0: tag#1666 CDB[20]: ba [ 1347.020076][ C1] sd 0:0:1:0: tag#1667 CDB: opcode=0xe5 (vendor) [ 1347.020093][ C1] sd 0:0:1:0: tag#1667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1347.040510][ C1] sd 0:0:1:0: tag#1667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1347.049588][ C1] sd 0:0:1:0: tag#1667 CDB[20]: ba 03:51:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x0, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1349.728927][ C0] sd 0:0:1:0: tag#1668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.738813][ C0] sd 0:0:1:0: tag#1668 CDB: opcode=0xe5 (vendor) [ 1349.745184][ C0] sd 0:0:1:0: tag#1668 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1349.754223][ C0] sd 0:0:1:0: tag#1668 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1349.763262][ C0] sd 0:0:1:0: tag#1668 CDB[20]: ba [ 1349.779399][ C0] sd 0:0:1:0: tag#1669 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.789258][ C0] sd 0:0:1:0: tag#1669 CDB: opcode=0xe5 (vendor) [ 1349.795606][ C0] sd 0:0:1:0: tag#1669 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1349.804658][ C0] sd 0:0:1:0: tag#1669 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1349.813695][ C0] sd 0:0:1:0: tag#1669 CDB[20]: ba 03:51:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x0, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1349.920501][ C1] sd 0:0:1:0: tag#1692 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.930541][ C1] sd 0:0:1:0: tag#1692 CDB: opcode=0xe5 (vendor) [ 1349.936931][ C1] sd 0:0:1:0: tag#1692 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1349.946121][ C1] sd 0:0:1:0: tag#1692 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1349.950507][ C0] sd 0:0:1:0: tag#1693 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.955184][ C1] sd 0:0:1:0: tag#1692 CDB[20]: ba [ 1349.965139][ C0] sd 0:0:1:0: tag#1693 CDB: opcode=0xe5 (vendor) [ 1349.976596][ C0] sd 0:0:1:0: tag#1693 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1349.985810][ C0] sd 0:0:1:0: tag#1693 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1349.994852][ C0] sd 0:0:1:0: tag#1693 CDB[20]: ba [ 1350.018723][ C0] sd 0:0:1:0: tag#1694 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1350.028757][ C0] sd 0:0:1:0: tag#1694 CDB: opcode=0xe5 (vendor) [ 1350.035150][ C0] sd 0:0:1:0: tag#1694 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1350.044194][ C0] sd 0:0:1:0: tag#1694 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1350.053235][ C0] sd 0:0:1:0: tag#1694 CDB[20]: ba 03:51:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x0, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1351.674703][ C0] sd 0:0:1:0: tag#1695 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1351.684580][ C0] sd 0:0:1:0: tag#1695 CDB: opcode=0xe5 (vendor) [ 1351.690920][ C0] sd 0:0:1:0: tag#1695 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1351.699948][ C0] sd 0:0:1:0: tag#1695 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1351.708962][ C0] sd 0:0:1:0: tag#1695 CDB[20]: ba 03:51:52 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x0, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1353.732972][ C0] sd 0:0:1:0: tag#1678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1353.742835][ C0] sd 0:0:1:0: tag#1678 CDB: opcode=0xe5 (vendor) [ 1353.749195][ C0] sd 0:0:1:0: tag#1678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1353.758248][ C0] sd 0:0:1:0: tag#1678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1353.767301][ C0] sd 0:0:1:0: tag#1678 CDB[20]: ba [ 1353.790843][ C0] sd 0:0:1:0: tag#1691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1353.800706][ C0] sd 0:0:1:0: tag#1691 CDB: opcode=0xe5 (vendor) [ 1353.807059][ C0] sd 0:0:1:0: tag#1691 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1353.816098][ C0] sd 0:0:1:0: tag#1691 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1353.825142][ C0] sd 0:0:1:0: tag#1691 CDB[20]: ba 03:51:53 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:51:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x0, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1353.953583][ C1] sd 0:0:1:0: tag#1706 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1353.956108][ C0] sd 0:0:1:0: tag#1707 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1353.963450][ C1] sd 0:0:1:0: tag#1706 CDB: opcode=0xe5 (vendor) [ 1353.973271][ C0] sd 0:0:1:0: tag#1707 CDB: opcode=0xe5 (vendor) [ 1353.979595][ C1] sd 0:0:1:0: tag#1706 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1353.985919][ C0] sd 0:0:1:0: tag#1707 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1353.994917][ C1] sd 0:0:1:0: tag#1706 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1354.003922][ C0] sd 0:0:1:0: tag#1707 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1354.012951][ C1] sd 0:0:1:0: tag#1706 CDB[20]: ba [ 1354.021949][ C0] sd 0:0:1:0: tag#1707 CDB[20]: ba [ 1354.045658][ C1] sd 0:0:1:0: tag#1708 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1354.055512][ C1] sd 0:0:1:0: tag#1708 CDB: opcode=0xe5 (vendor) [ 1354.062297][ C1] sd 0:0:1:0: tag#1708 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1354.071478][ C1] sd 0:0:1:0: tag#1708 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1354.080532][ C1] sd 0:0:1:0: tag#1708 CDB[20]: ba [ 1354.085715][ C1] sd 0:0:1:0: tag#1709 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1354.095584][ C1] sd 0:0:1:0: tag#1709 CDB: opcode=0xe5 (vendor) [ 1354.101951][ C1] sd 0:0:1:0: tag#1709 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1354.110973][ C1] sd 0:0:1:0: tag#1709 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1354.120027][ C1] sd 0:0:1:0: tag#1709 CDB[20]: ba 03:51:55 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:51:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(0x0, 0x0) [ 1356.261036][ C0] sd 0:0:1:0: tag#1711 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1356.270911][ C0] sd 0:0:1:0: tag#1711 CDB: opcode=0xe5 (vendor) [ 1356.277280][ C0] sd 0:0:1:0: tag#1711 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1356.286357][ C0] sd 0:0:1:0: tag#1711 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1356.295406][ C0] sd 0:0:1:0: tag#1711 CDB[20]: ba 03:51:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1356.367591][ C0] sd 0:0:1:0: tag#1713 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1356.377462][ C0] sd 0:0:1:0: tag#1713 CDB: opcode=0xe5 (vendor) [ 1356.383815][ C0] sd 0:0:1:0: tag#1713 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1356.392867][ C0] sd 0:0:1:0: tag#1713 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1356.401902][ C0] sd 0:0:1:0: tag#1713 CDB[20]: ba [ 1356.456941][ C0] sd 0:0:1:0: tag#1714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1356.466791][ C0] sd 0:0:1:0: tag#1714 CDB: opcode=0xe5 (vendor) [ 1356.473138][ C0] sd 0:0:1:0: tag#1714 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1356.479046][ C1] sd 0:0:1:0: tag#1715 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1356.482176][ C0] sd 0:0:1:0: tag#1714 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1356.492094][ C1] sd 0:0:1:0: tag#1715 CDB: opcode=0xe5 (vendor) 03:51:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x0, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1356.501066][ C0] sd 0:0:1:0: tag#1714 CDB[20]: ba [ 1356.507375][ C1] sd 0:0:1:0: tag#1715 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1356.521548][ C1] sd 0:0:1:0: tag#1715 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1356.530623][ C1] sd 0:0:1:0: tag#1715 CDB[20]: ba 03:51:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x0, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x0, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:51:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x0, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1360.669003][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 1360.669046][ C0] sd 0:0:1:0: tag#1667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1360.685496][ C0] sd 0:0:1:0: tag#1667 CDB: opcode=0xe5 (vendor) [ 1360.691851][ C0] sd 0:0:1:0: tag#1667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1360.700905][ C0] sd 0:0:1:0: tag#1667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1360.710054][ C0] sd 0:0:1:0: tag#1667 CDB[20]: ba [ 1360.776199][ C0] sd 0:0:1:0: tag#1668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1360.786121][ C0] sd 0:0:1:0: tag#1668 CDB: opcode=0xe5 (vendor) [ 1360.792468][ C0] sd 0:0:1:0: tag#1668 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1360.801581][ C0] sd 0:0:1:0: tag#1668 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1360.810633][ C0] sd 0:0:1:0: tag#1668 CDB[20]: ba 03:52:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1360.883267][ C1] sd 0:0:1:0: tag#1672 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1360.889677][ C0] sd 0:0:1:0: tag#1673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1360.893118][ C1] sd 0:0:1:0: tag#1672 CDB: opcode=0xe5 (vendor) [ 1360.902917][ C0] sd 0:0:1:0: tag#1673 CDB: opcode=0xe5 (vendor) [ 1360.909305][ C1] sd 0:0:1:0: tag#1672 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1360.915610][ C0] sd 0:0:1:0: tag#1673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1360.915629][ C0] sd 0:0:1:0: tag#1673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1360.924629][ C1] sd 0:0:1:0: tag#1672 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1360.933633][ C0] sd 0:0:1:0: tag#1673 CDB[20]: ba [ 1360.954125][ C0] sd 0:0:1:0: tag#1674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1360.956804][ C1] sd 0:0:1:0: tag#1672 CDB[20]: ba [ 1360.966593][ C0] sd 0:0:1:0: tag#1674 CDB: opcode=0xe5 (vendor) [ 1360.978069][ C0] sd 0:0:1:0: tag#1674 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1360.987094][ C0] sd 0:0:1:0: tag#1674 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1360.996118][ C0] sd 0:0:1:0: tag#1674 CDB[20]: ba 03:52:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x0, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1361.074470][ C0] sd 0:0:1:0: tag#1675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1361.084340][ C0] sd 0:0:1:0: tag#1675 CDB: opcode=0xe5 (vendor) [ 1361.090767][ C0] sd 0:0:1:0: tag#1675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1361.099820][ C0] sd 0:0:1:0: tag#1675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1361.109003][ C0] sd 0:0:1:0: tag#1675 CDB[20]: ba 03:52:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x0, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1361.134348][ C1] sd 0:0:1:0: tag#1676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1361.144217][ C1] sd 0:0:1:0: tag#1676 CDB: opcode=0xe5 (vendor) [ 1361.150548][ C1] sd 0:0:1:0: tag#1676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1361.159588][ C1] sd 0:0:1:0: tag#1676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1361.168678][ C1] sd 0:0:1:0: tag#1676 CDB[20]: ba [ 1361.177007][ C0] sd 0:0:1:0: tag#1677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1361.186873][ C0] sd 0:0:1:0: tag#1677 CDB: opcode=0xe5 (vendor) [ 1361.193235][ C0] sd 0:0:1:0: tag#1677 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1361.202363][ C0] sd 0:0:1:0: tag#1677 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1361.211382][ C0] sd 0:0:1:0: tag#1677 CDB[20]: ba 03:52:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1361.414264][ C1] sd 0:0:1:0: tag#1678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1361.424151][ C1] sd 0:0:1:0: tag#1678 CDB: opcode=0xe5 (vendor) [ 1361.430500][ C1] sd 0:0:1:0: tag#1678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1361.439556][ C1] sd 0:0:1:0: tag#1678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1361.448596][ C1] sd 0:0:1:0: tag#1678 CDB[20]: ba 03:52:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1361.510995][ C0] sd 0:0:1:0: tag#1679 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1361.520967][ C0] sd 0:0:1:0: tag#1679 CDB: opcode=0xe5 (vendor) [ 1361.527316][ C0] sd 0:0:1:0: tag#1679 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1361.536366][ C0] sd 0:0:1:0: tag#1679 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1361.545512][ C0] sd 0:0:1:0: tag#1679 CDB[20]: ba 03:52:01 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x0, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x0, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x0, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1368.724064][ C1] scsi_io_completion_action: 19 callbacks suppressed [ 1368.724096][ C1] sd 0:0:1:0: tag#1732 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1368.740648][ C1] sd 0:0:1:0: tag#1732 CDB: opcode=0xe5 (vendor) [ 1368.746997][ C1] sd 0:0:1:0: tag#1732 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1368.756041][ C1] sd 0:0:1:0: tag#1732 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1368.765097][ C1] sd 0:0:1:0: tag#1732 CDB[20]: ba [ 1368.770877][ C1] sd 0:0:1:0: tag#1733 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1368.780716][ C1] sd 0:0:1:0: tag#1733 CDB: opcode=0xe5 (vendor) [ 1368.787183][ C1] sd 0:0:1:0: tag#1733 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1368.796234][ C1] sd 0:0:1:0: tag#1733 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1368.805320][ C1] sd 0:0:1:0: tag#1733 CDB[20]: ba 03:52:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x0, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x0, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1369.443447][ C0] sd 0:0:1:0: tag#1741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1369.453321][ C0] sd 0:0:1:0: tag#1741 CDB: opcode=0xe5 (vendor) [ 1369.459650][ C0] sd 0:0:1:0: tag#1741 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1369.468705][ C0] sd 0:0:1:0: tag#1741 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1369.477764][ C0] sd 0:0:1:0: tag#1741 CDB[20]: ba [ 1370.851971][ C1] sd 0:0:1:0: tag#1763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1370.861919][ C1] sd 0:0:1:0: tag#1763 CDB: opcode=0xe5 (vendor) [ 1370.868425][ C1] sd 0:0:1:0: tag#1763 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1370.877661][ C1] sd 0:0:1:0: tag#1763 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1370.886734][ C1] sd 0:0:1:0: tag#1763 CDB[20]: ba 03:52:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:13 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1373.765729][ C0] sd 0:0:1:0: tag#1794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1373.775585][ C0] sd 0:0:1:0: tag#1794 CDB: opcode=0xe5 (vendor) [ 1373.781921][ C0] sd 0:0:1:0: tag#1794 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1373.790933][ C0] sd 0:0:1:0: tag#1794 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1373.799971][ C0] sd 0:0:1:0: tag#1794 CDB[20]: ba 03:52:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x0, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1373.919991][ C0] sd 0:0:1:0: tag#1797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1373.929877][ C0] sd 0:0:1:0: tag#1797 CDB: opcode=0xe5 (vendor) [ 1373.936225][ C0] sd 0:0:1:0: tag#1797 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1373.945252][ C0] sd 0:0:1:0: tag#1797 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1373.954310][ C0] sd 0:0:1:0: tag#1797 CDB[20]: ba [ 1374.051331][ C1] sd 0:0:1:0: tag#1798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1374.061324][ C1] sd 0:0:1:0: tag#1798 CDB: opcode=0xe5 (vendor) [ 1374.067688][ C1] sd 0:0:1:0: tag#1798 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1374.076779][ C1] sd 0:0:1:0: tag#1798 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1374.085961][ C1] sd 0:0:1:0: tag#1798 CDB[20]: ba 03:52:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1374.205178][ C0] sd 0:0:1:0: tag#1799 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1374.215061][ C0] sd 0:0:1:0: tag#1799 CDB: opcode=0xe5 (vendor) [ 1374.221388][ C0] sd 0:0:1:0: tag#1799 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1374.230527][ C0] sd 0:0:1:0: tag#1799 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1374.239566][ C0] sd 0:0:1:0: tag#1799 CDB[20]: ba [ 1374.259091][ C0] sd 0:0:1:0: tag#1800 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1374.268993][ C0] sd 0:0:1:0: tag#1800 CDB: opcode=0xe5 (vendor) [ 1374.275346][ C0] sd 0:0:1:0: tag#1800 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1374.284465][ C0] sd 0:0:1:0: tag#1800 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1374.293492][ C0] sd 0:0:1:0: tag#1800 CDB[20]: ba 03:52:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1375.201141][ C0] sd 0:0:1:0: tag#1792 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1375.211082][ C0] sd 0:0:1:0: tag#1792 CDB: opcode=0xe5 (vendor) [ 1375.217432][ C0] sd 0:0:1:0: tag#1792 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1375.226488][ C0] sd 0:0:1:0: tag#1792 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1375.235524][ C0] sd 0:0:1:0: tag#1792 CDB[20]: ba [ 1375.272870][ C0] sd 0:0:1:0: tag#1919 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1375.282735][ C0] sd 0:0:1:0: tag#1919 CDB: opcode=0xe5 (vendor) [ 1375.289074][ C0] sd 0:0:1:0: tag#1919 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1375.298159][ C0] sd 0:0:1:0: tag#1919 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1375.307195][ C0] sd 0:0:1:0: tag#1919 CDB[20]: ba [ 1375.319618][ C1] sd 0:0:1:0: tag#1793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1375.329576][ C1] sd 0:0:1:0: tag#1793 CDB: opcode=0xe5 (vendor) [ 1375.335919][ C1] sd 0:0:1:0: tag#1793 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1375.345040][ C1] sd 0:0:1:0: tag#1793 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1375.354075][ C1] sd 0:0:1:0: tag#1793 CDB[20]: ba 03:52:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x0, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1376.280217][ C0] sd 0:0:1:0: tag#1889 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1376.290128][ C0] sd 0:0:1:0: tag#1889 CDB: opcode=0xe5 (vendor) [ 1376.296495][ C0] sd 0:0:1:0: tag#1889 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1376.305549][ C0] sd 0:0:1:0: tag#1889 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1376.314591][ C0] sd 0:0:1:0: tag#1889 CDB[20]: ba [ 1376.808206][ C1] sd 0:0:1:0: tag#1802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1376.818173][ C1] sd 0:0:1:0: tag#1802 CDB: opcode=0xe5 (vendor) [ 1376.824533][ C1] sd 0:0:1:0: tag#1802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1376.833603][ C1] sd 0:0:1:0: tag#1802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1376.842635][ C1] sd 0:0:1:0: tag#1802 CDB[20]: ba 03:52:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x0, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1378.842735][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1378.842765][ C0] sd 0:0:1:0: tag#1810 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1378.859249][ C0] sd 0:0:1:0: tag#1810 CDB: opcode=0xe5 (vendor) [ 1378.865592][ C0] sd 0:0:1:0: tag#1810 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1378.874632][ C0] sd 0:0:1:0: tag#1810 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1378.883665][ C0] sd 0:0:1:0: tag#1810 CDB[20]: ba 03:52:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1378.894448][ C1] sd 0:0:1:0: tag#1811 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1378.904282][ C1] sd 0:0:1:0: tag#1811 CDB: opcode=0xe5 (vendor) [ 1378.910610][ C1] sd 0:0:1:0: tag#1811 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1378.919686][ C1] sd 0:0:1:0: tag#1811 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1378.928723][ C1] sd 0:0:1:0: tag#1811 CDB[20]: ba [ 1378.964348][ C0] sd 0:0:1:0: tag#1812 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1378.974214][ C0] sd 0:0:1:0: tag#1812 CDB: opcode=0xe5 (vendor) [ 1378.980574][ C0] sd 0:0:1:0: tag#1812 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1378.989619][ C0] sd 0:0:1:0: tag#1812 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1378.998657][ C0] sd 0:0:1:0: tag#1812 CDB[20]: ba 03:52:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x0, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1379.783621][ C1] sd 0:0:1:0: tag#1792 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1379.793667][ C1] sd 0:0:1:0: tag#1792 CDB: opcode=0xe5 (vendor) [ 1379.800024][ C1] sd 0:0:1:0: tag#1792 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1379.809150][ C1] sd 0:0:1:0: tag#1792 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1379.817296][ C0] sd 0:0:1:0: tag#1908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1379.818300][ C1] sd 0:0:1:0: tag#1792 CDB[20]: ba [ 1379.828090][ C0] sd 0:0:1:0: tag#1908 CDB: opcode=0xe5 (vendor) [ 1379.839521][ C0] sd 0:0:1:0: tag#1908 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1379.848582][ C0] sd 0:0:1:0: tag#1908 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1379.857613][ C0] sd 0:0:1:0: tag#1908 CDB[20]: ba [ 1379.927529][ C0] sd 0:0:1:0: tag#1909 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1379.937410][ C0] sd 0:0:1:0: tag#1909 CDB: opcode=0xe5 (vendor) [ 1379.943762][ C0] sd 0:0:1:0: tag#1909 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1379.952803][ C0] sd 0:0:1:0: tag#1909 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1379.961853][ C0] sd 0:0:1:0: tag#1909 CDB[20]: ba 03:52:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(0x0, 0x0) [ 1382.685093][ C0] sd 0:0:1:0: tag#1833 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1382.694946][ C0] sd 0:0:1:0: tag#1833 CDB: opcode=0xe5 (vendor) [ 1382.701286][ C0] sd 0:0:1:0: tag#1833 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1382.710530][ C0] sd 0:0:1:0: tag#1833 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1382.719553][ C0] sd 0:0:1:0: tag#1833 CDB[20]: ba [ 1382.724702][ C0] sd 0:0:1:0: tag#1834 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1382.734538][ C0] sd 0:0:1:0: tag#1834 CDB: opcode=0xe5 (vendor) [ 1382.740866][ C0] sd 0:0:1:0: tag#1834 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1382.749901][ C0] sd 0:0:1:0: tag#1834 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1382.758941][ C0] sd 0:0:1:0: tag#1834 CDB[20]: ba [ 1383.808981][ C0] sd 0:0:1:0: tag#1837 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1383.818879][ C0] sd 0:0:1:0: tag#1837 CDB: opcode=0xe5 (vendor) [ 1383.825239][ C0] sd 0:0:1:0: tag#1837 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1383.834278][ C0] sd 0:0:1:0: tag#1837 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1383.843309][ C0] sd 0:0:1:0: tag#1837 CDB[20]: ba 03:52:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1383.962695][ C0] sd 0:0:1:0: tag#1838 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1383.972560][ C0] sd 0:0:1:0: tag#1838 CDB: opcode=0xe5 (vendor) [ 1383.978910][ C0] sd 0:0:1:0: tag#1838 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1383.987951][ C0] sd 0:0:1:0: tag#1838 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1383.997021][ C0] sd 0:0:1:0: tag#1838 CDB[20]: ba [ 1384.002162][ C0] sd 0:0:1:0: tag#1808 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1384.011984][ C0] sd 0:0:1:0: tag#1808 CDB: opcode=0xe5 (vendor) [ 1384.018350][ C0] sd 0:0:1:0: tag#1808 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1384.027480][ C0] sd 0:0:1:0: tag#1808 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1384.036510][ C0] sd 0:0:1:0: tag#1808 CDB[20]: ba 03:52:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1385.173186][ C1] sd 0:0:1:0: tag#1792 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1385.183155][ C1] sd 0:0:1:0: tag#1792 CDB: opcode=0xe5 (vendor) [ 1385.189524][ C1] sd 0:0:1:0: tag#1792 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1385.198647][ C1] sd 0:0:1:0: tag#1792 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1385.207935][ C1] sd 0:0:1:0: tag#1792 CDB[20]: ba 03:52:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1385.329216][ C0] sd 0:0:1:0: tag#1793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1385.339086][ C0] sd 0:0:1:0: tag#1793 CDB: opcode=0xe5 (vendor) [ 1385.345433][ C0] sd 0:0:1:0: tag#1793 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1385.354466][ C0] sd 0:0:1:0: tag#1793 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1385.363509][ C0] sd 0:0:1:0: tag#1793 CDB[20]: ba [ 1385.417946][ C0] sd 0:0:1:0: tag#1794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1385.427820][ C0] sd 0:0:1:0: tag#1794 CDB: opcode=0xe5 (vendor) [ 1385.434170][ C0] sd 0:0:1:0: tag#1794 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1385.443458][ C0] sd 0:0:1:0: tag#1794 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1385.452495][ C0] sd 0:0:1:0: tag#1794 CDB[20]: ba [ 1385.522430][ C0] sd 0:0:1:0: tag#1795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1385.532437][ C0] sd 0:0:1:0: tag#1795 CDB: opcode=0xe5 (vendor) [ 1385.538773][ C0] sd 0:0:1:0: tag#1795 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1385.547854][ C0] sd 0:0:1:0: tag#1795 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1385.556932][ C0] sd 0:0:1:0: tag#1795 CDB[20]: ba 03:52:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 5: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1387.524862][ C0] sd 0:0:1:0: tag#1860 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1387.534776][ C0] sd 0:0:1:0: tag#1860 CDB: opcode=0xe5 (vendor) [ 1387.541125][ C0] sd 0:0:1:0: tag#1860 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1387.550196][ C0] sd 0:0:1:0: tag#1860 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1387.559243][ C0] sd 0:0:1:0: tag#1860 CDB[20]: ba [ 1387.635845][ C1] sd 0:0:1:0: tag#1832 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1387.645772][ C1] sd 0:0:1:0: tag#1832 CDB: opcode=0xe5 (vendor) [ 1387.652142][ C1] sd 0:0:1:0: tag#1832 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1387.661183][ C1] sd 0:0:1:0: tag#1832 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1387.670246][ C1] sd 0:0:1:0: tag#1832 CDB[20]: ba 03:52:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1387.776173][ C1] sd 0:0:1:0: tag#1856 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1387.786107][ C1] sd 0:0:1:0: tag#1856 CDB: opcode=0xe5 (vendor) [ 1387.792509][ C1] sd 0:0:1:0: tag#1856 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1387.800791][ C0] sd 0:0:1:0: tag#1857 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1387.801589][ C1] sd 0:0:1:0: tag#1856 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1387.811369][ C0] sd 0:0:1:0: tag#1857 CDB: opcode=0xe5 (vendor) [ 1387.811392][ C0] sd 0:0:1:0: tag#1857 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1387.811406][ C0] sd 0:0:1:0: tag#1857 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1387.811419][ C0] sd 0:0:1:0: tag#1857 CDB[20]: ba [ 1387.850360][ C1] sd 0:0:1:0: tag#1856 CDB[20]: ba 03:52:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 4: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1390.667187][ C0] scsi_io_completion_action: 3 callbacks suppressed [ 1390.667216][ C0] sd 0:0:1:0: tag#1859 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1390.683662][ C0] sd 0:0:1:0: tag#1859 CDB: opcode=0xe5 (vendor) [ 1390.689997][ C0] sd 0:0:1:0: tag#1859 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1390.699052][ C0] sd 0:0:1:0: tag#1859 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1390.708104][ C0] sd 0:0:1:0: tag#1859 CDB[20]: ba 03:52:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x0, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1391.760226][ C1] sd 0:0:1:0: tag#2061 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1391.770144][ C1] sd 0:0:1:0: tag#2061 CDB: opcode=0xe5 (vendor) [ 1391.776496][ C1] sd 0:0:1:0: tag#2061 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1391.785543][ C1] sd 0:0:1:0: tag#2061 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1391.794605][ C1] sd 0:0:1:0: tag#2061 CDB[20]: ba [ 1391.805212][ C0] sd 0:0:1:0: tag#1889 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1391.815063][ C0] sd 0:0:1:0: tag#1889 CDB: opcode=0xe5 (vendor) [ 1391.821399][ C0] sd 0:0:1:0: tag#1889 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1391.830445][ C0] sd 0:0:1:0: tag#1889 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1391.839479][ C0] sd 0:0:1:0: tag#1889 CDB[20]: ba 03:52:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1394.720653][ C0] sd 0:0:1:0: tag#1890 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1394.730509][ C0] sd 0:0:1:0: tag#1890 CDB: opcode=0xe5 (vendor) [ 1394.736860][ C0] sd 0:0:1:0: tag#1890 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1394.745909][ C0] sd 0:0:1:0: tag#1890 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1394.754957][ C0] sd 0:0:1:0: tag#1890 CDB[20]: ba 03:52:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(0x0, 0x0) [ 1397.199450][ C0] sd 0:0:1:0: tag#1907 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1397.209310][ C0] sd 0:0:1:0: tag#1907 CDB: opcode=0xe5 (vendor) [ 1397.215666][ C0] sd 0:0:1:0: tag#1907 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1397.224721][ C0] sd 0:0:1:0: tag#1907 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1397.233754][ C0] sd 0:0:1:0: tag#1907 CDB[20]: ba 03:52:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1398.686359][ C0] sd 0:0:1:0: tag#1908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1398.696269][ C0] sd 0:0:1:0: tag#1908 CDB: opcode=0xe5 (vendor) [ 1398.702622][ C0] sd 0:0:1:0: tag#1908 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1398.711641][ C0] sd 0:0:1:0: tag#1908 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1398.720692][ C0] sd 0:0:1:0: tag#1908 CDB[20]: ba [ 1399.678104][ C0] sd 0:0:1:0: tag#1909 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1399.687960][ C0] sd 0:0:1:0: tag#1909 CDB: opcode=0xe5 (vendor) [ 1399.694343][ C0] sd 0:0:1:0: tag#1909 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1399.703398][ C0] sd 0:0:1:0: tag#1909 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1399.712460][ C0] sd 0:0:1:0: tag#1909 CDB[20]: ba [ 1400.739958][ C0] sd 0:0:1:0: tag#1884 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1400.750098][ C0] sd 0:0:1:0: tag#1884 CDB: opcode=0xe5 (vendor) [ 1400.756470][ C0] sd 0:0:1:0: tag#1884 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1400.765502][ C0] sd 0:0:1:0: tag#1884 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1400.774553][ C0] sd 0:0:1:0: tag#1884 CDB[20]: ba 03:52:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1402.121099][ C1] sd 0:0:1:0: tag#1890 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1402.130981][ C1] sd 0:0:1:0: tag#1890 CDB: opcode=0xe5 (vendor) [ 1402.137426][ C1] sd 0:0:1:0: tag#1890 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1402.146453][ C1] sd 0:0:1:0: tag#1890 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1402.155508][ C1] sd 0:0:1:0: tag#1890 CDB[20]: ba 03:52:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(0x0, 0x0) [ 1403.104906][ C0] sd 0:0:1:0: tag#2060 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1403.114759][ C0] sd 0:0:1:0: tag#2060 CDB: opcode=0xe5 (vendor) [ 1403.121086][ C0] sd 0:0:1:0: tag#2060 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1403.130132][ C0] sd 0:0:1:0: tag#2060 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1403.139185][ C0] sd 0:0:1:0: tag#2060 CDB[20]: ba [ 1404.693098][ C1] sd 0:0:1:0: tag#1920 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1404.702975][ C1] sd 0:0:1:0: tag#1920 CDB: opcode=0xe5 (vendor) [ 1404.709312][ C1] sd 0:0:1:0: tag#1920 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1404.718345][ C1] sd 0:0:1:0: tag#1920 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1404.727384][ C1] sd 0:0:1:0: tag#1920 CDB[20]: ba 03:52:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1406.721885][ C0] sd 0:0:1:0: tag#1957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1406.731756][ C0] sd 0:0:1:0: tag#1957 CDB: opcode=0xe5 (vendor) [ 1406.738103][ C0] sd 0:0:1:0: tag#1957 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1406.747157][ C0] sd 0:0:1:0: tag#1957 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1406.756217][ C0] sd 0:0:1:0: tag#1957 CDB[20]: ba 03:52:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1407.335988][ C1] sd 0:0:1:0: tag#1955 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1407.345875][ C1] sd 0:0:1:0: tag#1955 CDB: opcode=0xe5 (vendor) [ 1407.352228][ C1] sd 0:0:1:0: tag#1955 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1407.361251][ C1] sd 0:0:1:0: tag#1955 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1407.370344][ C1] sd 0:0:1:0: tag#1955 CDB[20]: ba [ 1409.565008][ C1] sd 0:0:1:0: tag#1922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1409.574907][ C1] sd 0:0:1:0: tag#1922 CDB: opcode=0xe5 (vendor) [ 1409.581264][ C1] sd 0:0:1:0: tag#1922 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1409.590314][ C1] sd 0:0:1:0: tag#1922 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1409.599364][ C1] sd 0:0:1:0: tag#1922 CDB[20]: ba 03:52:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(0x0, 0x0) 03:52:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1411.983409][ C0] sd 0:0:1:0: tag#1967 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1411.993272][ C0] sd 0:0:1:0: tag#1967 CDB: opcode=0xe5 (vendor) [ 1411.999619][ C0] sd 0:0:1:0: tag#1967 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1412.008687][ C0] sd 0:0:1:0: tag#1967 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1412.017723][ C0] sd 0:0:1:0: tag#1967 CDB[20]: ba [ 1412.027565][ C1] sd 0:0:1:0: tag#1969 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1412.037449][ C1] sd 0:0:1:0: tag#1969 CDB: opcode=0xe5 (vendor) [ 1412.043827][ C1] sd 0:0:1:0: tag#1969 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1412.053026][ C1] sd 0:0:1:0: tag#1969 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1412.062095][ C1] sd 0:0:1:0: tag#1969 CDB[20]: ba [ 1413.689616][ C0] sd 0:0:1:0: tag#1968 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1413.699492][ C0] sd 0:0:1:0: tag#1968 CDB: opcode=0xe5 (vendor) [ 1413.705870][ C0] sd 0:0:1:0: tag#1968 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1413.714959][ C0] sd 0:0:1:0: tag#1968 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1413.724000][ C0] sd 0:0:1:0: tag#1968 CDB[20]: ba [ 1415.729074][ C0] sd 0:0:1:0: tag#1970 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1415.738946][ C0] sd 0:0:1:0: tag#1970 CDB: opcode=0xe5 (vendor) [ 1415.745305][ C0] sd 0:0:1:0: tag#1970 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1415.754344][ C0] sd 0:0:1:0: tag#1970 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1415.763388][ C0] sd 0:0:1:0: tag#1970 CDB[20]: ba 03:52:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1417.275019][ C1] sd 0:0:1:0: tag#2388 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1417.284912][ C1] sd 0:0:1:0: tag#2388 CDB: opcode=0xe5 (vendor) [ 1417.291256][ C1] sd 0:0:1:0: tag#2388 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1417.300315][ C1] sd 0:0:1:0: tag#2388 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1417.309371][ C1] sd 0:0:1:0: tag#2388 CDB[20]: ba [ 1417.720611][ C0] sd 0:0:1:0: tag#1934 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1417.730615][ C0] sd 0:0:1:0: tag#1934 CDB: opcode=0xe5 (vendor) [ 1417.736970][ C0] sd 0:0:1:0: tag#1934 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1417.746044][ C0] sd 0:0:1:0: tag#1934 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1417.755081][ C0] sd 0:0:1:0: tag#1934 CDB[20]: ba 03:52:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:52:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1419.402282][ C1] sd 0:0:1:0: tag#1935 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1419.412195][ C1] sd 0:0:1:0: tag#1935 CDB: opcode=0xe5 (vendor) [ 1419.418527][ C1] sd 0:0:1:0: tag#1935 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1419.427576][ C1] sd 0:0:1:0: tag#1935 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1419.436626][ C1] sd 0:0:1:0: tag#1935 CDB[20]: ba 03:52:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1419.474187][ C1] sd 0:0:1:0: tag#1936 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1419.484084][ C1] sd 0:0:1:0: tag#1936 CDB: opcode=0xe5 (vendor) [ 1419.490416][ C1] sd 0:0:1:0: tag#1936 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1419.499509][ C1] sd 0:0:1:0: tag#1936 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1419.508548][ C1] sd 0:0:1:0: tag#1936 CDB[20]: ba [ 1419.530425][ C1] sd 0:0:1:0: tag#1942 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1419.540432][ C1] sd 0:0:1:0: tag#1942 CDB: opcode=0xe5 (vendor) [ 1419.546788][ C1] sd 0:0:1:0: tag#1942 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1419.555824][ C1] sd 0:0:1:0: tag#1942 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1419.564860][ C1] sd 0:0:1:0: tag#1942 CDB[20]: ba [ 1419.570032][ C1] sd 0:0:1:0: tag#1953 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1419.580045][ C1] sd 0:0:1:0: tag#1953 CDB: opcode=0xe5 (vendor) [ 1419.586413][ C1] sd 0:0:1:0: tag#1953 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1419.595478][ C1] sd 0:0:1:0: tag#1953 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1419.604519][ C1] sd 0:0:1:0: tag#1953 CDB[20]: ba [ 1419.832332][ C0] sd 0:0:1:0: tag#2173 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1419.842197][ C0] sd 0:0:1:0: tag#2173 CDB: opcode=0xe5 (vendor) [ 1419.848523][ C0] sd 0:0:1:0: tag#2173 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1419.857573][ C0] sd 0:0:1:0: tag#2173 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1419.866621][ C0] sd 0:0:1:0: tag#2173 CDB[20]: ba 03:53:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1421.722941][ C1] sd 0:0:1:0: tag#1976 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1421.732911][ C1] sd 0:0:1:0: tag#1976 CDB: opcode=0xe5 (vendor) [ 1421.739252][ C1] sd 0:0:1:0: tag#1976 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1421.748319][ C1] sd 0:0:1:0: tag#1976 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1421.757372][ C1] sd 0:0:1:0: tag#1976 CDB[20]: ba 03:53:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1423.860726][ C0] sd 0:0:1:0: tag#1920 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1423.870603][ C0] sd 0:0:1:0: tag#1920 CDB: opcode=0xe5 (vendor) [ 1423.877005][ C0] sd 0:0:1:0: tag#1920 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1423.886053][ C0] sd 0:0:1:0: tag#1920 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1423.895097][ C0] sd 0:0:1:0: tag#1920 CDB[20]: ba 03:53:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1424.214439][ C0] sd 0:0:1:0: tag#1921 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1424.224438][ C0] sd 0:0:1:0: tag#1921 CDB: opcode=0xe5 (vendor) [ 1424.230757][ C0] sd 0:0:1:0: tag#1921 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1424.239825][ C0] sd 0:0:1:0: tag#1921 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1424.248918][ C0] sd 0:0:1:0: tag#1921 CDB[20]: ba [ 1424.308529][T11262] ================================================================== [ 1424.316622][T11262] BUG: KCSAN: data-race in ext4_setattr / filemap_read [ 1424.323455][T11262] [ 1424.325760][T11262] write to 0xffff888103e0b698 of 8 bytes by task 11265 on cpu 1: [ 1424.333450][T11262] ext4_setattr+0xd7e/0xf20 [ 1424.337938][T11262] notify_change+0x8a3/0xac0 [ 1424.342510][T11262] do_truncate+0xf7/0x140 [ 1424.346832][T11262] path_openat+0x191f/0x1eb0 [ 1424.351411][T11262] do_filp_open+0x105/0x220 [ 1424.355910][T11262] do_sys_openat2+0xb5/0x2b0 [ 1424.360483][T11262] __x64_sys_creat+0x62/0x80 [ 1424.365059][T11262] do_syscall_64+0x44/0xd0 [ 1424.369481][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1424.375368][T11262] [ 1424.377704][T11262] read to 0xffff888103e0b698 of 8 bytes by task 11262 on cpu 0: [ 1424.385340][T11262] filemap_read+0x1f5/0x16d0 [ 1424.389909][T11262] generic_file_read_iter+0x72/0x2a0 [ 1424.395360][T11262] ext4_file_read_iter+0x1db/0x290 [ 1424.400452][T11262] generic_file_splice_read+0x24f/0x330 [ 1424.405981][T11262] splice_direct_to_actor+0x2aa/0x650 [ 1424.411381][T11262] do_splice_direct+0x106/0x190 [ 1424.416226][T11262] do_sendfile+0x675/0xc40 [ 1424.420633][T11262] __x64_sys_sendfile64+0x102/0x140 [ 1424.425816][T11262] do_syscall_64+0x44/0xd0 [ 1424.430227][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1424.436129][T11262] [ 1424.438438][T11262] value changed: 0x00000000001a4c01 -> 0x0000000000000000 [ 1424.445531][T11262] [ 1424.447831][T11262] Reported by Kernel Concurrency Sanitizer on: 03:53:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1424.453953][T11262] CPU: 0 PID: 11262 Comm: syz-executor.4 Not tainted 5.16.0-rc3-syzkaller #0 [ 1424.462699][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.472746][T11262] ================================================================== [ 1424.514662][ C0] sd 0:0:1:0: tag#1922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1424.515301][ C1] sd 0:0:1:0: tag#1985 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1424.524571][ C0] sd 0:0:1:0: tag#1922 CDB: opcode=0xe5 (vendor) [ 1424.534444][ C1] sd 0:0:1:0: tag#1985 CDB: opcode=0xe5 (vendor) [ 1424.540748][ C0] sd 0:0:1:0: tag#1922 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1424.547074][ C1] sd 0:0:1:0: tag#1985 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1424.556087][ C0] sd 0:0:1:0: tag#1922 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1424.565099][ C1] sd 0:0:1:0: tag#1985 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1424.565117][ C1] sd 0:0:1:0: tag#1985 CDB[20]: ba [ 1424.574128][ C0] sd 0:0:1:0: tag#1922 CDB[20]: ba 03:53:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x0, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1425.664935][ C1] sd 0:0:1:0: tag#1986 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1425.674811][ C1] sd 0:0:1:0: tag#1986 CDB: opcode=0xe5 (vendor) [ 1425.681136][ C1] sd 0:0:1:0: tag#1986 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1425.690276][ C1] sd 0:0:1:0: tag#1986 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1425.699427][ C1] sd 0:0:1:0: tag#1986 CDB[20]: ba 03:53:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1426.667585][ C1] sd 0:0:1:0: tag#1987 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1426.677456][ C1] sd 0:0:1:0: tag#1987 CDB: opcode=0xe5 (vendor) [ 1426.683847][ C1] sd 0:0:1:0: tag#1987 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1426.692896][ C1] sd 0:0:1:0: tag#1987 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1426.701941][ C1] sd 0:0:1:0: tag#1987 CDB[20]: ba 03:53:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1426.882803][ C1] sd 0:0:1:0: tag#1988 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1426.892660][ C1] sd 0:0:1:0: tag#1988 CDB: opcode=0xe5 (vendor) [ 1426.898990][ C1] sd 0:0:1:0: tag#1988 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1426.908045][ C1] sd 0:0:1:0: tag#1988 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1426.917281][ C1] sd 0:0:1:0: tag#1988 CDB[20]: ba 03:53:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1426.978298][ C0] sd 0:0:1:0: tag#1991 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1426.988174][ C0] sd 0:0:1:0: tag#1991 CDB: opcode=0xe5 (vendor) [ 1426.994515][ C0] sd 0:0:1:0: tag#1991 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1427.003549][ C0] sd 0:0:1:0: tag#1991 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1427.012586][ C0] sd 0:0:1:0: tag#1991 CDB[20]: ba [ 1427.019426][ C1] sd 0:0:1:0: tag#1992 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1427.029431][ C1] sd 0:0:1:0: tag#1992 CDB: opcode=0xe5 (vendor) [ 1427.035772][ C1] sd 0:0:1:0: tag#1992 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1427.044822][ C1] sd 0:0:1:0: tag#1992 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1427.053894][ C1] sd 0:0:1:0: tag#1992 CDB[20]: ba 03:53:08 executing program 4: perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(0x0, 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1428.663246][ C0] sd 0:0:1:0: tag#1993 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1428.673184][ C0] sd 0:0:1:0: tag#1993 CDB: opcode=0xe5 (vendor) [ 1428.679529][ C0] sd 0:0:1:0: tag#1993 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1428.688673][ C0] sd 0:0:1:0: tag#1993 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1428.697811][ C0] sd 0:0:1:0: tag#1993 CDB[20]: ba 03:53:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1429.207437][ C0] sd 0:0:1:0: tag#1994 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1429.217292][ C0] sd 0:0:1:0: tag#1994 CDB: opcode=0xe5 (vendor) [ 1429.223677][ C0] sd 0:0:1:0: tag#1994 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1429.232735][ C0] sd 0:0:1:0: tag#1994 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1429.241759][ C0] sd 0:0:1:0: tag#1994 CDB[20]: ba 03:53:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1430.771701][ C0] sd 0:0:1:0: tag#1996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1430.781666][ C0] sd 0:0:1:0: tag#1996 CDB: opcode=0xe5 (vendor) [ 1430.788043][ C0] sd 0:0:1:0: tag#1996 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1430.797090][ C0] sd 0:0:1:0: tag#1996 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1430.806136][ C0] sd 0:0:1:0: tag#1996 CDB[20]: ba 03:53:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x7, 0x8, 0x4], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x0, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x4, 0x7fff, 0x100, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x9, 0x4, 0x8, 0xc5, 0x62, 0x20, 0x0, 0x6, 0x2, 0x80, 0x5, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001440)={0x0, 0x5, 0x0, [0x5, 0x4, 0x0, 0x8], [0x1000, 0x7ff, 0xffffffffffff0001, 0x9, 0x4, 0x817, 0x2ce, 0x2, 0x6, 0x3, 0x6, 0x0, 0x3, 0x9, 0x8b, 0x9, 0x3, 0x2, 0x5, 0x8, 0x8, 0x2, 0x8, 0x1, 0xe8b3, 0x200, 0x2e, 0x20, 0x8, 0x20, 0x2, 0x100000000, 0x127, 0x5, 0x80000000, 0x4, 0x80000000, 0x0, 0x2fb, 0x3, 0x101, 0x0, 0x45, 0x1, 0x100000001, 0xfffffffffffffff8, 0x5c9, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x3ff, 0x20, 0x100000000, 0x8001, 0x6, 0xfc, 0x5, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0xffffffffffffff80, 0x1, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x2, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x81, 0xcae8, 0x0, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x5, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb09, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x6, 0x2, 0x80, 0x0, 0x3, 0x4]}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="da", 0x1}]) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:53:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x0, @usage, 0x0, 0x3, 0x8, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1431.084176][ C1] sd 0:0:1:0: tag#1997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1431.094100][ C1] sd 0:0:1:0: tag#1997 CDB: opcode=0xe5 (vendor) [ 1431.100456][ C1] sd 0:0:1:0: tag#1997 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1431.109513][ C1] sd 0:0:1:0: tag#1997 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1431.118647][ C1] sd 0:0:1:0: tag#1997 CDB[20]: ba [ 1431.128738][ C0] sd 0:0:1:0: tag#1998 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1431.138713][ C0] sd 0:0:1:0: tag#1998 CDB: opcode=0xe5 (vendor) [ 1431.145064][ C0] sd 0:0:1:0: tag#1998 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1431.154183][ C0] sd 0:0:1:0: tag#1998 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1431.163241][ C0] sd 0:0:1:0: tag#1998 CDB[20]: ba