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", "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"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x8, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4ba9, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001980)={0xe6, [], 0x3, "f54488f1737bf3"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002980)={0x0, r1, "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", "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"}) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r2, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x8, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r3, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4ba9, 0x0) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000100)={0x0, 0x4, 0xff, 0x9, 0x101, 0x200}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001440)={r2, 0x2400000000, 0x1, [0x100, 0x1930, 0x20004000000, 0x8, 0x8], [0x3, 0x3, 0xa4c5, 0xfb, 0x800, 0x7fffffff, 0x6, 0x3, 0x7, 0x401, 0x3, 0x48af359, 0x2, 0x2, 0x5, 0x40, 0x8, 0x0, 0x80000001, 0x6, 0x9, 0x7, 0x8, 0x4, 0x8, 0x4, 0x35, 0xce, 0x800, 0x3ff, 0x5, 0x80, 0xffffffffffffffff, 0xfb, 0x4775, 0x8, 0x800, 0x100000001, 0x600000000000, 0x0, 0x0, 0xff, 0x8, 0x80000001, 0x1, 0xc9b7, 0x9, 0x40, 0xfff, 0xff, 0x3, 0x2, 0x4, 0x40, 0x3def, 0x3f, 0x5, 0x9, 0x4, 0x5a69, 0x20, 0x2, 0x1, 0xffffffffffffffc0, 0x1, 0x1ff, 0x6, 0xef, 0x8, 0x2, 0xfffffffffffffff9, 0x100000001, 0x2, 0x1, 0x8001, 0x1, 0x2, 0xffffffff, 0xfffffffffffffff8, 0x8, 0x4, 0xfff, 0xfffffffffffffff9, 0x5, 0x5, 0x87, 0x2, 0x100000001, 0x9016, 0x3dc9, 0x80, 0x1, 0x7, 0x1911, 0x1, 0x1, 0x0, 0x8b, 0x3, 0x8, 0xffffffffffffff81, 0x7, 0x5, 0x100000000, 0x8000, 0xffffffffffffffe1, 0x401, 0x7fff, 0x8, 0x2, 0xfffffffffffff435, 0x1000, 0x0, 0x3ff, 0x3, 0x6, 0x3, 0xc4f, 0x9, 0x5, 0x1]}) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2965.715890][ C0] sd 0:0:1:0: tag#8139 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.725744][ C0] sd 0:0:1:0: tag#8139 CDB: opcode=0xe5 (vendor) [ 2965.732117][ C0] sd 0:0:1:0: tag#8139 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2965.741139][ C0] sd 0:0:1:0: tag#8139 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2965.750201][ C0] sd 0:0:1:0: tag#8139 CDB[20]: ba [ 2965.853690][ C1] sd 0:0:1:0: tag#8140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.863561][ C1] sd 0:0:1:0: tag#8140 CDB: opcode=0xe5 (vendor) [ 2965.869893][ C1] sd 0:0:1:0: tag#8140 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2965.878946][ C1] sd 0:0:1:0: tag#8140 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2965.888009][ C1] sd 0:0:1:0: tag#8140 CDB[20]: ba [ 2965.901910][T23984] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) 03:30:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0xfffffffffffffffe, @usage=0x3d9a8bc3, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, r3, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x0, @usage=0x6, 0x0, 0x0, [0x699ef64b, 0xffffffffffffc1ec, 0x0, 0x4, 0x2]}, {0x4, @struct={0x0, 0x2}, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x4, 0x2, 0x7fff, 0xffffffffffffffff, 0x4, 0x8000000001]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async, rerun: 32) sendfile(r4, r7, 0x0, 0x8400fffffffb) (rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2966.011426][ C0] sd 0:0:1:0: tag#8173 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2966.021284][ C0] sd 0:0:1:0: tag#8173 CDB: opcode=0xe5 (vendor) [ 2966.027644][ C0] sd 0:0:1:0: tag#8173 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2966.036687][ C0] sd 0:0:1:0: tag#8173 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2966.045773][ C0] sd 0:0:1:0: tag#8173 CDB[20]: ba [ 2966.053488][ C1] sd 0:0:1:0: tag#8174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2966.063357][ C1] sd 0:0:1:0: tag#8174 CDB: opcode=0xe5 (vendor) [ 2966.069690][ C1] sd 0:0:1:0: tag#8174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2966.078751][ C1] sd 0:0:1:0: tag#8174 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2966.087821][ C1] sd 0:0:1:0: tag#8174 CDB[20]: ba [ 2968.224034][ C1] sd 0:0:1:0: tag#8178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.233917][ C1] sd 0:0:1:0: tag#8178 CDB: opcode=0xe5 (vendor) [ 2968.240286][ C1] sd 0:0:1:0: tag#8178 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2968.249330][ C1] sd 0:0:1:0: tag#8178 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.258418][ C1] sd 0:0:1:0: tag#8178 CDB[20]: ba 03:30:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) fcntl$setstatus(r5, 0x4, 0x2000) [ 2968.372734][ C1] sd 0:0:1:0: tag#8179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.382620][ C1] sd 0:0:1:0: tag#8179 CDB: opcode=0xe5 (vendor) [ 2968.388968][ C1] sd 0:0:1:0: tag#8179 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2968.398016][ C1] sd 0:0:1:0: tag#8179 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.407093][ C1] sd 0:0:1:0: tag#8179 CDB[20]: ba 03:30:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000100)={0x0, 0x4, 0xff, 0x9, 0x101, 0x200}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001440)={r2, 0x2400000000, 0x1, [0x100, 0x1930, 0x20004000000, 0x8, 0x8], [0x3, 0x3, 0xa4c5, 0xfb, 0x800, 0x7fffffff, 0x6, 0x3, 0x7, 0x401, 0x3, 0x48af359, 0x2, 0x2, 0x5, 0x40, 0x8, 0x0, 0x80000001, 0x6, 0x9, 0x7, 0x8, 0x4, 0x8, 0x4, 0x35, 0xce, 0x800, 0x3ff, 0x5, 0x80, 0xffffffffffffffff, 0xfb, 0x4775, 0x8, 0x800, 0x100000001, 0x600000000000, 0x0, 0x0, 0xff, 0x8, 0x80000001, 0x1, 0xc9b7, 0x9, 0x40, 0xfff, 0xff, 0x3, 0x2, 0x4, 0x40, 0x3def, 0x3f, 0x5, 0x9, 0x4, 0x5a69, 0x20, 0x2, 0x1, 0xffffffffffffffc0, 0x1, 0x1ff, 0x6, 0xef, 0x8, 0x2, 0xfffffffffffffff9, 0x100000001, 0x2, 0x1, 0x8001, 0x1, 0x2, 0xffffffff, 0xfffffffffffffff8, 0x8, 0x4, 0xfff, 0xfffffffffffffff9, 0x5, 0x5, 0x87, 0x2, 0x100000001, 0x9016, 0x3dc9, 0x80, 0x1, 0x7, 0x1911, 0x1, 0x1, 0x0, 0x8b, 0x3, 0x8, 0xffffffffffffff81, 0x7, 0x5, 0x100000000, 0x8000, 0xffffffffffffffe1, 0x401, 0x7fff, 0x8, 0x2, 0xfffffffffffff435, 0x1000, 0x0, 0x3ff, 0x3, 0x6, 0x3, 0xc4f, 0x9, 0x5, 0x1]}) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2968.646405][ C0] sd 0:0:1:0: tag#8180 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.656277][ C0] sd 0:0:1:0: tag#8180 CDB: opcode=0xe5 (vendor) [ 2968.662648][ C0] sd 0:0:1:0: tag#8180 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2968.671689][ C0] sd 0:0:1:0: tag#8180 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.680751][ C0] sd 0:0:1:0: tag#8180 CDB[20]: ba [ 2968.707326][T24009] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) 03:30:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9921a3009aea8c4, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ba91e15f40c45a29"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4ed6c13643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806f300b0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2971.373646][ C0] sd 0:0:1:0: tag#8177 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2971.383543][ C0] sd 0:0:1:0: tag#8177 CDB: opcode=0xe5 (vendor) [ 2971.389896][ C0] sd 0:0:1:0: tag#8177 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2971.398959][ C0] sd 0:0:1:0: tag#8177 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2971.408010][ C0] sd 0:0:1:0: tag#8177 CDB[20]: ba [ 2971.413172][ C0] sd 0:0:1:0: tag#8178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2971.422998][ C0] sd 0:0:1:0: tag#8178 CDB: opcode=0xe5 (vendor) [ 2971.429327][ C0] sd 0:0:1:0: tag#8178 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2971.438371][ C0] sd 0:0:1:0: tag#8178 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2971.447427][ C0] sd 0:0:1:0: tag#8178 CDB[20]: ba 03:30:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) finit_module(r2, &(0x7f0000000100)='#.\x00', 0x1) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9921a3009aea8c4, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ba91e15f40c45a29"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4ed6c13643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806f300b0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) getpid() (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9921a3009aea8c4, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ba91e15f40c45a29"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4ed6c13643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806f300b0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 2972.599362][ C1] sd 0:0:1:0: tag#8166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2972.609324][ C1] sd 0:0:1:0: tag#8166 CDB: opcode=0xe5 (vendor) [ 2972.615727][ C1] sd 0:0:1:0: tag#8166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2972.623670][ C0] sd 0:0:1:0: tag#8167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2972.624836][ C1] sd 0:0:1:0: tag#8166 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:30:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2972.634563][ C0] sd 0:0:1:0: tag#8167 CDB: opcode=0xe5 (vendor) [ 2972.634589][ C0] sd 0:0:1:0: tag#8167 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2972.634604][ C0] sd 0:0:1:0: tag#8167 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2972.634621][ C0] sd 0:0:1:0: tag#8167 CDB[20]: ba [ 2972.643650][ C1] sd 0:0:1:0: tag#8166 CDB[20]: ba [ 2972.781550][ C1] sd 0:0:1:0: tag#92 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2972.791252][ C1] sd 0:0:1:0: tag#92 CDB: opcode=0xe5 (vendor) [ 2972.797457][ C1] sd 0:0:1:0: tag#92 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2972.806355][ C1] sd 0:0:1:0: tag#92 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2972.815270][ C1] sd 0:0:1:0: tag#92 CDB[20]: ba 03:30:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2972.869799][ C1] sd 0:0:1:0: tag#119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2972.879580][ C1] sd 0:0:1:0: tag#119 CDB: opcode=0xe5 (vendor) [ 2972.885832][ C1] sd 0:0:1:0: tag#119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2972.894791][ C1] sd 0:0:1:0: tag#119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2972.903790][ C1] sd 0:0:1:0: tag#119 CDB[20]: ba 03:30:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9921a3009aea8c4, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ba91e15f40c45a29"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4ed6c13643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806f300b0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) getpid() (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc9921a3009aea8c4, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="62ba91e15f40c45a29"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4ed6c13643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806f300b0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x8, 0x6, 0x7fffffff, 0x8, 0x1f, 0x3, 0x8, 0x78}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x4, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x557, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x40) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 64) creat(&(0x7f0000000740)='./bus\x00', 0x0) (rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async, rerun: 32) fcntl$setstatus(r5, 0x4, 0x2000) (rerun: 32) [ 2973.763533][ C1] sd 0:0:1:0: tag#210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.773340][ C1] sd 0:0:1:0: tag#210 CDB: opcode=0xe5 (vendor) [ 2973.779617][ C1] sd 0:0:1:0: tag#210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.788636][ C1] sd 0:0:1:0: tag#210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.797628][ C1] sd 0:0:1:0: tag#210 CDB[20]: ba [ 2973.812880][ C0] sd 0:0:1:0: tag#8145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.822737][ C0] sd 0:0:1:0: tag#8145 CDB: opcode=0xe5 (vendor) [ 2973.829060][ C0] sd 0:0:1:0: tag#8145 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.838102][ C0] sd 0:0:1:0: tag#8145 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.847162][ C0] sd 0:0:1:0: tag#8145 CDB[20]: ba [ 2973.919954][ C0] sd 0:0:1:0: tag#8146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.929820][ C0] sd 0:0:1:0: tag#8146 CDB: opcode=0xe5 (vendor) [ 2973.936273][ C0] sd 0:0:1:0: tag#8146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.945340][ C0] sd 0:0:1:0: tag#8146 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.954384][ C0] sd 0:0:1:0: tag#8146 CDB[20]: ba 03:30:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) fcntl$setstatus(r5, 0x4, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) fcntl$setstatus(r5, 0x4, 0x2000) (async) 03:30:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2974.076787][ C0] sd 0:0:1:0: tag#211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2974.086558][ C0] sd 0:0:1:0: tag#211 CDB: opcode=0xe5 (vendor) [ 2974.092829][ C0] sd 0:0:1:0: tag#211 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2974.101772][ C0] sd 0:0:1:0: tag#211 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2974.110735][ C0] sd 0:0:1:0: tag#211 CDB[20]: ba 03:30:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x8, 0x6, 0x7fffffff, 0x8, 0x1f, 0x3, 0x8, 0x78}, 0x0) (rerun: 32) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x4, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x557, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 64) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 64) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x40) (async, rerun: 32) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x0, &(0x7f0000000540)) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) open(&(0x7f0000000100)='./bus\x00', 0x101002, 0x100) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x931935e083457b1e, 0x10000020, 0xe40, 0x0, 0x4, 0xffffffffde353034, 0x0, 0x9, 0x10001}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x4, 0x81, 0x76, 0x0, 0xfffffffffffffffa, 0x41010, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x1}, 0x10422, 0x6, 0x3, 0x1, 0x2, 0x1f, 0x2, 0x0, 0x5, 0x0, 0x25}, 0xffffffffffffffff, 0x2, r0, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2978.378950][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 2978.378977][ C1] sd 0:0:1:0: tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.395247][ C1] sd 0:0:1:0: tag#56 CDB: opcode=0xe5 (vendor) [ 2978.401399][ C1] sd 0:0:1:0: tag#56 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.410262][ C1] sd 0:0:1:0: tag#56 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.419123][ C1] sd 0:0:1:0: tag#56 CDB[20]: ba 03:30:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x8, 0x6, 0x7fffffff, 0x8, 0x1f, 0x3, 0x8, 0x78}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x4, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x557, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x40) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x8, 0x6, 0x7fffffff, 0x8, 0x1f, 0x3, 0x8, 0x78}, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x4, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x557, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x40) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 2978.573293][ C1] sd 0:0:1:0: tag#57 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.582968][ C1] sd 0:0:1:0: tag#57 CDB: opcode=0xe5 (vendor) [ 2978.589123][ C1] sd 0:0:1:0: tag#57 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.597996][ C1] sd 0:0:1:0: tag#57 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.606858][ C1] sd 0:0:1:0: tag#57 CDB[20]: ba [ 2978.636201][ C0] sd 0:0:1:0: tag#58 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.645885][ C0] sd 0:0:1:0: tag#58 CDB: opcode=0xe5 (vendor) [ 2978.652046][ C0] sd 0:0:1:0: tag#58 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.660917][ C0] sd 0:0:1:0: tag#58 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.669780][ C0] sd 0:0:1:0: tag#58 CDB[20]: ba 03:30:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x931935e083457b1e, 0x10000020, 0xe40, 0x0, 0x4, 0xffffffffde353034, 0x0, 0x9, 0x10001}, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x4, 0x81, 0x76, 0x0, 0xfffffffffffffffa, 0x41010, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x1}, 0x10422, 0x6, 0x3, 0x1, 0x2, 0x1f, 0x2, 0x0, 0x5, 0x0, 0x25}, 0xffffffffffffffff, 0x2, r0, 0x1) (async) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r0, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005a440)={0x10001, [], 0x80, "f92efbdd649488"}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x931935e083457b1e, 0x10000020, 0xe40, 0x0, 0x4, 0xffffffffde353034, 0x0, 0x9, 0x10001}, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x4200, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x4, 0x81, 0x76, 0x0, 0xfffffffffffffffa, 0x41010, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x1}, 0x10422, 0x6, 0x3, 0x1, 0x2, 0x1f, 0x2, 0x0, 0x5, 0x0, 0x25}, 0xffffffffffffffff, 0x2, r0, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r0, r3, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2979.507727][ C0] sd 0:0:1:0: tag#63 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.517426][ C0] sd 0:0:1:0: tag#63 CDB: opcode=0xe5 (vendor) [ 2979.523632][ C0] sd 0:0:1:0: tag#63 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.532516][ C0] sd 0:0:1:0: tag#63 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.541365][ C0] sd 0:0:1:0: tag#63 CDB[20]: ba [ 2979.576832][ C1] sd 0:0:1:0: tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.586446][ C1] sd 0:0:1:0: tag#0 CDB: opcode=0xe5 (vendor) [ 2979.592543][ C1] sd 0:0:1:0: tag#0 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.601303][ C1] sd 0:0:1:0: tag#0 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.610118][ C1] sd 0:0:1:0: tag#0 CDB[20]: ba [ 2979.867721][ C1] sd 0:0:1:0: tag#6 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.877375][ C1] sd 0:0:1:0: tag#6 CDB: opcode=0xe5 (vendor) [ 2979.883511][ C1] sd 0:0:1:0: tag#6 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.892295][ C1] sd 0:0:1:0: tag#6 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.901058][ C1] sd 0:0:1:0: tag#6 CDB[20]: ba 03:30:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) fcntl$setsig(r2, 0xa, 0x2e) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005a440)={0x10001, [], 0x80, "f92efbdd649488"}) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2979.991745][ C0] sd 0:0:1:0: tag#7 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2980.001370][ C0] sd 0:0:1:0: tag#7 CDB: opcode=0xe5 (vendor) [ 2980.007471][ C0] sd 0:0:1:0: tag#7 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2980.013192][ C1] sd 0:0:1:0: tag#8 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2980.016253][ C0] sd 0:0:1:0: tag#7 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.025779][ C1] sd 0:0:1:0: tag#8 CDB: opcode=0xe5 (vendor) [ 2980.034542][ C0] sd 0:0:1:0: tag#7 CDB[20]: ba [ 2980.040585][ C1] sd 0:0:1:0: tag#8 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2980.054177][ C1] sd 0:0:1:0: tag#8 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.062983][ C1] sd 0:0:1:0: tag#8 CDB[20]: ba [ 2980.260828][ C0] sd 0:0:1:0: tag#9 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2980.270435][ C0] sd 0:0:1:0: tag#9 CDB: opcode=0xe5 (vendor) [ 2980.276545][ C0] sd 0:0:1:0: tag#9 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2980.285352][ C0] sd 0:0:1:0: tag#9 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.294159][ C0] sd 0:0:1:0: tag#9 CDB[20]: ba [ 2980.299036][ C0] sd 0:0:1:0: tag#10 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 03:30:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2980.308713][ C0] sd 0:0:1:0: tag#10 CDB: opcode=0xe5 (vendor) [ 2980.314915][ C0] sd 0:0:1:0: tag#10 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2980.323794][ C0] sd 0:0:1:0: tag#10 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.332681][ C0] sd 0:0:1:0: tag#10 CDB[20]: ba 03:30:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x0, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) fcntl$setsig(r2, 0xa, 0x2e) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005a440)={0x10001, [], 0x80, "f92efbdd649488"}) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cece54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x8]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cece54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cece54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) fcntl$setsig(r2, 0xa, 0x2e) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 32) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 32) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 32) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cece54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2984.330743][ C1] scsi_io_completion_action: 10 callbacks suppressed [ 2984.330774][ C1] sd 0:0:1:0: tag#51 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2984.347184][ C1] sd 0:0:1:0: tag#51 CDB: opcode=0xe5 (vendor) [ 2984.353374][ C1] sd 0:0:1:0: tag#51 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2984.362255][ C1] sd 0:0:1:0: tag#51 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2984.371216][ C1] sd 0:0:1:0: tag#51 CDB[20]: ba 03:30:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x7}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x1ff, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x3, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2986.206884][ C1] sd 0:0:1:0: tag#47 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.216602][ C1] sd 0:0:1:0: tag#47 CDB: opcode=0xe5 (vendor) [ 2986.222821][ C1] sd 0:0:1:0: tag#47 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.231663][ C1] sd 0:0:1:0: tag#47 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.240545][ C1] sd 0:0:1:0: tag#47 CDB[20]: ba [ 2986.379086][ C0] sd 0:0:1:0: tag#188 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.388881][ C0] sd 0:0:1:0: tag#188 CDB: opcode=0xe5 (vendor) [ 2986.395189][ C0] sd 0:0:1:0: tag#188 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.404135][ C0] sd 0:0:1:0: tag#188 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.413094][ C0] sd 0:0:1:0: tag#188 CDB[20]: ba [ 2986.418135][ C0] sd 0:0:1:0: tag#189 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.427893][ C0] sd 0:0:1:0: tag#189 CDB: opcode=0xe5 (vendor) [ 2986.429087][ C1] sd 0:0:1:0: tag#48 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.434175][ C0] sd 0:0:1:0: tag#189 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.434194][ C0] sd 0:0:1:0: tag#189 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.434211][ C0] sd 0:0:1:0: tag#189 CDB[20]: ba [ 2986.443851][ C1] sd 0:0:1:0: tag#48 CDB: opcode=0xe5 (vendor) [ 2986.472969][ C1] sd 0:0:1:0: tag#48 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.481856][ C1] sd 0:0:1:0: tag#48 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.490781][ C1] sd 0:0:1:0: tag#48 CDB[20]: ba 03:30:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x8]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 32) creat(&(0x7f0000000740)='./bus\x00', 0x0) (rerun: 32) 03:30:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x8]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="00000000906b000000000000000000000000324614e76fbbdf4b0dfa5d7bc0f8f754b16f5390700c8984ca984ccb49331d4834df310026245fda4d655869de61f10dcbd060610e580f7f7730d6392ffdd60f4f9937ad6808b50a3efc7320561198b0af9e12c5aca259507018a003dfef24c2183c7d88f168acc091887cf66ffc8b885fe51f62337559ec429920004818d7caad26577bc89da5082c51fba935d5dcbfbe48260057237e3f81d9edf8757b6ba7a09797fe3ebc635c593950e99fa99e55bb9abff537a0e9749533f17bb83b77c1899c05402201fd1a4ec699fde4bddcf51c872ed1dca55e1d968e99f827004ffbf3dfe5946aa2d9"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x0, 0x2, 0x1f, 0x0, 0x80000001, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x10, 0x9, 0x2, 0x5, 0x8001, 0xfffff85b, 0x8, 0x0, 0x800, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r2, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2986.905664][ C1] sd 0:0:1:0: tag#338 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.915495][ C1] sd 0:0:1:0: tag#338 CDB: opcode=0xe5 (vendor) [ 2986.921748][ C1] sd 0:0:1:0: tag#338 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.930750][ C1] sd 0:0:1:0: tag#338 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.939718][ C1] sd 0:0:1:0: tag#338 CDB[20]: ba [ 2987.131566][ C1] sd 0:0:1:0: tag#343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2987.141482][ C1] sd 0:0:1:0: tag#343 CDB: opcode=0xe5 (vendor) [ 2987.147837][ C1] sd 0:0:1:0: tag#343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2987.156887][ C1] sd 0:0:1:0: tag#343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2987.165929][ C1] sd 0:0:1:0: tag#343 CDB[20]: ba 03:30:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x7}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x1ff, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x3, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async, rerun: 64) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (rerun: 64) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 32) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x8]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2987.323315][ C0] sd 0:0:1:0: tag#128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2987.333117][ C0] sd 0:0:1:0: tag#128 CDB: opcode=0xe5 (vendor) [ 2987.339362][ C0] sd 0:0:1:0: tag#128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2987.348353][ C0] sd 0:0:1:0: tag#128 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2987.357320][ C0] sd 0:0:1:0: tag#128 CDB[20]: ba [ 2987.411506][ C1] sd 0:0:1:0: tag#392 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2987.421304][ C1] sd 0:0:1:0: tag#392 CDB: opcode=0xe5 (vendor) [ 2987.427582][ C1] sd 0:0:1:0: tag#392 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2987.436557][ C1] sd 0:0:1:0: tag#392 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2987.445523][ C1] sd 0:0:1:0: tag#392 CDB[20]: ba 03:30:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0x0, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2989.545264][ C0] sd 0:0:1:0: tag#153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.550387][ C1] sd 0:0:1:0: tag#393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.555029][ C0] sd 0:0:1:0: tag#153 CDB: opcode=0xe5 (vendor) [ 2989.564764][ C1] sd 0:0:1:0: tag#393 CDB: opcode=0xe5 (vendor) [ 2989.570973][ C0] sd 0:0:1:0: tag#153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.577206][ C1] sd 0:0:1:0: tag#393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.586127][ C0] sd 0:0:1:0: tag#153 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.595062][ C1] sd 0:0:1:0: tag#393 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.603994][ C0] sd 0:0:1:0: tag#153 CDB[20]: ba [ 2989.612935][ C1] sd 0:0:1:0: tag#393 CDB[20]: ba 03:30:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x8]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="00000000906b000000000000000000000000324614e76fbbdf4b0dfa5d7bc0f8f754b16f5390700c8984ca984ccb49331d4834df310026245fda4d655869de61f10dcbd060610e580f7f7730d6392ffdd60f4f9937ad6808b50a3efc7320561198b0af9e12c5aca259507018a003dfef24c2183c7d88f168acc091887cf66ffc8b885fe51f62337559ec429920004818d7caad26577bc89da5082c51fba935d5dcbfbe48260057237e3f81d9edf8757b6ba7a09797fe3ebc635c593950e99fa99e55bb9abff537a0e9749533f17bb83b77c1899c05402201fd1a4ec699fde4bddcf51c872ed1dca55e1d968e99f827004ffbf3dfe5946aa2d9"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x0, 0x2, 0x1f, 0x0, 0x80000001, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x10, 0x9, 0x2, 0x5, 0x8001, 0xfffff85b, 0x8, 0x0, 0x800, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r2, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x8]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="00000000906b000000000000000000000000324614e76fbbdf4b0dfa5d7bc0f8f754b16f5390700c8984ca984ccb49331d4834df310026245fda4d655869de61f10dcbd060610e580f7f7730d6392ffdd60f4f9937ad6808b50a3efc7320561198b0af9e12c5aca259507018a003dfef24c2183c7d88f168acc091887cf66ffc8b885fe51f62337559ec429920004818d7caad26577bc89da5082c51fba935d5dcbfbe48260057237e3f81d9edf8757b6ba7a09797fe3ebc635c593950e99fa99e55bb9abff537a0e9749533f17bb83b77c1899c05402201fd1a4ec699fde4bddcf51c872ed1dca55e1d968e99f827004ffbf3dfe5946aa2d9"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x0, 0x2, 0x1f, 0x0, 0x80000001, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x10, 0x9, 0x2, 0x5, 0x8001, 0xfffff85b, 0x8, 0x0, 0x800, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r2, 0x2) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2989.710056][ C0] sd 0:0:1:0: tag#155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.719854][ C0] sd 0:0:1:0: tag#155 CDB: opcode=0xe5 (vendor) [ 2989.726147][ C0] sd 0:0:1:0: tag#155 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.735111][ C0] sd 0:0:1:0: tag#155 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.744086][ C0] sd 0:0:1:0: tag#155 CDB[20]: ba 03:30:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2989.759040][ C1] sd 0:0:1:0: tag#398 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.768827][ C1] sd 0:0:1:0: tag#398 CDB: opcode=0xe5 (vendor) [ 2989.775132][ C1] sd 0:0:1:0: tag#398 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.784114][ C1] sd 0:0:1:0: tag#398 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.793071][ C1] sd 0:0:1:0: tag#398 CDB[20]: ba 03:30:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2992.380190][ C0] sd 0:0:1:0: tag#156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.389975][ C0] sd 0:0:1:0: tag#156 CDB: opcode=0xe5 (vendor) [ 2992.396238][ C0] sd 0:0:1:0: tag#156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.405187][ C0] sd 0:0:1:0: tag#156 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.414172][ C0] sd 0:0:1:0: tag#156 CDB[20]: ba 03:30:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2992.550260][ C0] sd 0:0:1:0: tag#158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.560065][ C0] sd 0:0:1:0: tag#158 CDB: opcode=0xe5 (vendor) [ 2992.566372][ C0] sd 0:0:1:0: tag#158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.575333][ C0] sd 0:0:1:0: tag#158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.584313][ C0] sd 0:0:1:0: tag#158 CDB[20]: ba 03:30:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x8]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[@ANYBLOB="00000000906b000000000000000000000000324614e76fbbdf4b0dfa5d7bc0f8f754b16f5390700c8984ca984ccb49331d4834df310026245fda4d655869de61f10dcbd060610e580f7f7730d6392ffdd60f4f9937ad6808b50a3efc7320561198b0af9e12c5aca259507018a003dfef24c2183c7d88f168acc091887cf66ffc8b885fe51f62337559ec429920004818d7caad26577bc89da5082c51fba935d5dcbfbe48260057237e3f81d9edf8757b6ba7a09797fe3ebc635c593950e99fa99e55bb9abff537a0e9749533f17bb83b77c1899c05402201fd1a4ec699fde4bddcf51c872ed1dca55e1d968e99f827004ffbf3dfe5946aa2d9"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x0, 0x2, 0x1f, 0x0, 0x80000001, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x10, 0x9, 0x2, 0x5, 0x8001, 0xfffff85b, 0x8, 0x0, 0x800, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r2, 0x2) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x7}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x1ff, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x3, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x7}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x1ff, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x3, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2992.650878][ C1] sd 0:0:1:0: tag#399 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.660649][ C1] sd 0:0:1:0: tag#399 CDB: opcode=0xe5 (vendor) [ 2992.666650][ C0] sd 0:0:1:0: tag#159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.666916][ C1] sd 0:0:1:0: tag#399 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.676638][ C0] sd 0:0:1:0: tag#159 CDB: opcode=0xe5 (vendor) [ 2992.685561][ C1] sd 0:0:1:0: tag#399 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.691772][ C0] sd 0:0:1:0: tag#159 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.700708][ C1] sd 0:0:1:0: tag#399 CDB[20]: ba [ 2992.714692][ C0] sd 0:0:1:0: tag#159 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.723645][ C0] sd 0:0:1:0: tag#159 CDB[20]: ba [ 2992.752181][ C1] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.761966][ C1] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 2992.768256][ C1] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.777222][ C1] sd 0:0:1:0: tag#400 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.786198][ C1] sd 0:0:1:0: tag#400 CDB[20]: ba 03:30:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:36 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) (fail_nth: 1) [ 2993.189620][ C1] sd 0:0:1:0: tag#402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2993.199419][ C1] sd 0:0:1:0: tag#402 CDB: opcode=0xe5 (vendor) [ 2993.205691][ C1] sd 0:0:1:0: tag#402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2993.214675][ C1] sd 0:0:1:0: tag#402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2993.223624][ C1] sd 0:0:1:0: tag#402 CDB[20]: ba [ 2993.235858][T24344] FAULT_INJECTION: forcing a failure. [ 2993.235858][T24344] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.248497][T24344] CPU: 1 PID: 24344 Comm: syz-executor.1 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 2993.258652][T24344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.268705][T24344] Call Trace: [ 2993.271979][T24344] [ 2993.274907][T24344] dump_stack_lvl+0xd6/0x122 [ 2993.279638][T24344] dump_stack+0x11/0x1b [ 2993.283821][T24344] should_fail+0x23c/0x250 [ 2993.288335][T24344] ? alloc_pipe_info+0xac/0x350 [ 2993.293194][T24344] __should_failslab+0x81/0x90 [ 2993.298020][T24344] should_failslab+0x5/0x20 [ 2993.302532][T24344] kmem_cache_alloc_trace+0x52/0x350 [ 2993.307821][T24344] alloc_pipe_info+0xac/0x350 [ 2993.312504][T24344] splice_direct_to_actor+0x5f7/0x650 [ 2993.317879][T24344] ? security_file_permission+0x7c/0xa0 [ 2993.323428][T24344] ? do_splice_direct+0x190/0x190 [ 2993.328457][T24344] ? security_file_permission+0x87/0xa0 [ 2993.334026][T24344] do_splice_direct+0x106/0x190 [ 2993.338898][T24344] do_sendfile+0x675/0xc40 [ 2993.343327][T24344] __x64_sys_sendfile64+0x102/0x140 [ 2993.348526][T24344] do_syscall_64+0x44/0xd0 [ 2993.353014][T24344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2993.358944][T24344] RIP: 0033:0x7f7c5e618e99 [ 2993.363360][T24344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.382962][T24344] RSP: 002b:00007f7c5d78f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2993.391371][T24344] RAX: ffffffffffffffda RBX: 00007f7c5e72bf60 RCX: 00007f7c5e618e99 [ 2993.399344][T24344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2993.407315][T24344] RBP: 00007f7c5d78f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.415292][T24344] R10: 00008080ffffff80 R11: 0000000000000246 R12: 0000000000000001 [ 2993.423270][T24344] R13: 00007ffc4ba95d3f R14: 00007f7c5d78f300 R15: 0000000000022000 [ 2993.431294][T24344] 03:30:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:36 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) (fail_nth: 2) 03:30:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2993.768400][T24351] FAULT_INJECTION: forcing a failure. [ 2993.768400][T24351] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.781140][T24351] CPU: 1 PID: 24351 Comm: syz-executor.1 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 2993.791355][T24351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2993.801417][T24351] Call Trace: [ 2993.804689][T24351] [ 2993.807610][T24351] dump_stack_lvl+0xd6/0x122 [ 2993.812241][T24351] dump_stack+0x11/0x1b [ 2993.816427][T24351] should_fail+0x23c/0x250 [ 2993.820853][T24351] ? kcalloc+0x32/0x40 [ 2993.824960][T24351] __should_failslab+0x81/0x90 [ 2993.829766][T24351] should_failslab+0x5/0x20 [ 2993.834327][T24351] __kmalloc+0x6f/0x370 [ 2993.838481][T24351] ? kmem_cache_alloc_trace+0x24b/0x350 [ 2993.844140][T24351] kcalloc+0x32/0x40 [ 2993.848061][T24351] alloc_pipe_info+0x1be/0x350 [ 2993.852838][T24351] splice_direct_to_actor+0x5f7/0x650 [ 2993.858272][T24351] ? security_file_permission+0x7c/0xa0 [ 2993.863821][T24351] ? do_splice_direct+0x190/0x190 [ 2993.868881][T24351] ? security_file_permission+0x87/0xa0 [ 2993.874426][T24351] do_splice_direct+0x106/0x190 [ 2993.879292][T24351] do_sendfile+0x675/0xc40 [ 2993.883732][T24351] __x64_sys_sendfile64+0x102/0x140 [ 2993.888929][T24351] do_syscall_64+0x44/0xd0 [ 2993.893379][T24351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2993.899273][T24351] RIP: 0033:0x7f7c5e618e99 [ 2993.903801][T24351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.923405][T24351] RSP: 002b:00007f7c5d78f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2993.931815][T24351] RAX: ffffffffffffffda RBX: 00007f7c5e72bf60 RCX: 00007f7c5e618e99 [ 2993.939827][T24351] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2993.947815][T24351] RBP: 00007f7c5d78f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.955815][T24351] R10: 00008080ffffff80 R11: 0000000000000246 R12: 0000000000000001 [ 2993.963778][T24351] R13: 00007ffc4ba95d3f R14: 00007f7c5d78f300 R15: 0000000000022000 [ 2993.971757][T24351] 03:30:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x14, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x1ff, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x1ff}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff003, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2996.328186][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 2996.328214][ C1] sd 0:0:1:0: tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2996.343662][T24364] FAULT_INJECTION: forcing a failure. [ 2996.343662][T24364] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.344630][ C1] sd 0:0:1:0: tag#410 CDB: opcode=0xe5 (vendor) [ 2996.357203][T24364] CPU: 0 PID: 24364 Comm: syz-executor.1 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 2996.363445][ C1] sd 0:0:1:0: tag#410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2996.373534][T24364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2996.373548][T24364] Call Trace: [ 2996.373555][T24364] [ 2996.373561][T24364] dump_stack_lvl+0xd6/0x122 [ 2996.382514][ C1] sd 0:0:1:0: tag#410 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2996.392508][T24364] dump_stack+0x11/0x1b [ 2996.392535][T24364] should_fail+0x23c/0x250 [ 2996.395817][ C1] sd 0:0:1:0: tag#410 CDB[20]: ba [ 2996.398720][T24364] ? kmalloc_array+0x2d/0x40 [ 2996.430285][T24364] __should_failslab+0x81/0x90 [ 2996.435144][T24364] should_failslab+0x5/0x20 [ 2996.439648][T24364] __kmalloc+0x6f/0x370 [ 2996.443844][T24364] kmalloc_array+0x2d/0x40 [ 2996.448259][T24364] iter_file_splice_write+0xd5/0x790 [ 2996.453590][T24364] ? generic_file_read_iter+0x72/0x2a0 [ 2996.459052][T24364] ? __fsnotify_parent+0x372/0x490 [ 2996.464228][T24364] ? generic_file_splice_read+0x2c9/0x330 [ 2996.470071][T24364] ? splice_from_pipe+0xd0/0xd0 [ 2996.474996][T24364] direct_splice_actor+0x80/0xa0 [ 2996.479939][T24364] splice_direct_to_actor+0x345/0x650 [ 2996.485315][T24364] ? do_splice_direct+0x190/0x190 [ 2996.490342][T24364] do_splice_direct+0x106/0x190 [ 2996.495232][T24364] do_sendfile+0x675/0xc40 [ 2996.499679][T24364] __x64_sys_sendfile64+0x102/0x140 [ 2996.504882][T24364] do_syscall_64+0x44/0xd0 [ 2996.509341][T24364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2996.515270][T24364] RIP: 0033:0x7f7c5e618e99 [ 2996.519677][T24364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.539343][T24364] RSP: 002b:00007f7c5d78f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2996.547782][T24364] RAX: ffffffffffffffda RBX: 00007f7c5e72bf60 RCX: 00007f7c5e618e99 [ 2996.555792][T24364] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2996.563762][T24364] RBP: 00007f7c5d78f1d0 R08: 0000000000000000 R09: 0000000000000000 03:30:39 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) (fail_nth: 3) [ 2996.571727][T24364] R10: 00008080ffffff80 R11: 0000000000000246 R12: 0000000000000001 [ 2996.579768][T24364] R13: 00007ffc4ba95d3f R14: 00007f7c5d78f300 R15: 0000000000022000 [ 2996.587796][T24364] 03:30:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:39 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) (fail_nth: 4) [ 2996.740022][ C0] sd 0:0:1:0: tag#164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2996.749810][ C0] sd 0:0:1:0: tag#164 CDB: opcode=0xe5 (vendor) [ 2996.756100][ C0] sd 0:0:1:0: tag#164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2996.758672][T24368] FAULT_INJECTION: forcing a failure. [ 2996.758672][T24368] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.765078][ C0] sd 0:0:1:0: tag#164 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2996.777665][T24368] CPU: 1 PID: 24368 Comm: syz-executor.1 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 2996.786586][ C0] sd 0:0:1:0: tag#164 CDB[20]: ba [ 2996.796678][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2996.796691][T24368] Call Trace: [ 2996.796697][T24368] [ 2996.796704][T24368] dump_stack_lvl+0xd6/0x122 [ 2996.822525][T24368] dump_stack+0x11/0x1b [ 2996.826724][T24368] should_fail+0x23c/0x250 [ 2996.831264][T24368] ? ext4_init_io_end+0x2d/0xa0 [ 2996.836116][T24368] __should_failslab+0x81/0x90 [ 2996.840884][T24368] should_failslab+0x5/0x20 [ 2996.845437][T24368] kmem_cache_alloc+0x4f/0x320 [ 2996.850209][T24368] ext4_init_io_end+0x2d/0xa0 [ 2996.854910][T24368] ext4_writepages+0x745/0x1e80 [ 2996.859770][T24368] ? __crc32c_le_base+0x250/0x350 [ 2996.864875][T24368] ? mark_buffer_dirty+0x17a/0x260 [ 2996.870054][T24368] ? ext4_readpage+0x180/0x180 [ 2996.874865][T24368] do_writepages+0x1cb/0x330 [ 2996.879460][T24368] ? generic_write_end+0x139/0x180 [ 2996.884604][T24368] file_write_and_wait_range+0x132/0x1d0 [ 2996.890255][T24368] ext4_sync_file+0x105/0x6e0 [ 2996.894937][T24368] ? tsan.module_ctor+0x10/0x10 [ 2996.899790][T24368] vfs_fsync_range+0x107/0x120 [ 2996.904555][T24368] ext4_buffered_write_iter+0x322/0x380 [ 2996.910101][T24368] ext4_file_write_iter+0x2e7/0x1200 [ 2996.915396][T24368] ? filemap_read+0x1661/0x16d0 [ 2996.920309][T24368] do_iter_readv_writev+0x2de/0x380 [ 2996.925617][T24368] do_iter_write+0x192/0x5c0 [ 2996.930235][T24368] ? splice_from_pipe_next+0x34f/0x3b0 [ 2996.935757][T24368] ? kmalloc_array+0x2d/0x40 [ 2996.940342][T24368] vfs_iter_write+0x4c/0x70 [ 2996.944933][T24368] iter_file_splice_write+0x43a/0x790 [ 2996.950310][T24368] ? splice_from_pipe+0xd0/0xd0 [ 2996.955160][T24368] direct_splice_actor+0x80/0xa0 [ 2996.960104][T24368] splice_direct_to_actor+0x345/0x650 [ 2996.965482][T24368] ? do_splice_direct+0x190/0x190 [ 2996.970510][T24368] do_splice_direct+0x106/0x190 [ 2996.975515][T24368] do_sendfile+0x675/0xc40 [ 2996.980018][T24368] __x64_sys_sendfile64+0x102/0x140 [ 2996.985215][T24368] do_syscall_64+0x44/0xd0 [ 2996.989652][T24368] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2996.995609][T24368] RIP: 0033:0x7f7c5e618e99 [ 2997.000025][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2997.019639][T24368] RSP: 002b:00007f7c5d78f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2997.028051][T24368] RAX: ffffffffffffffda RBX: 00007f7c5e72bf60 RCX: 00007f7c5e618e99 [ 2997.036020][T24368] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2997.044073][T24368] RBP: 00007f7c5d78f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2997.052041][T24368] R10: 00008080ffffff80 R11: 0000000000000246 R12: 0000000000000001 [ 2997.060011][T24368] R13: 00007ffc4ba95d3f R14: 00007f7c5d78f300 R15: 0000000000022000 [ 2997.067989][T24368] 03:30:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x14, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x1ff, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x1ff}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff003, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 64) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 64) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x4, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x0, @struct={0x0, 0x4}, 0x0, 0x1, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fa80)={0xff, [], 0x7, "13eae8519f07a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000566c0)={0x6, [], 0x2, "1a850d43eed41d"}) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2997.131400][ C1] sd 0:0:1:0: tag#412 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.141189][ C1] sd 0:0:1:0: tag#412 CDB: opcode=0xe5 (vendor) [ 2997.147464][ C1] sd 0:0:1:0: tag#412 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.156443][ C1] sd 0:0:1:0: tag#412 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.165418][ C1] sd 0:0:1:0: tag#412 CDB[20]: ba [ 2997.189690][ C1] sd 0:0:1:0: tag#413 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.199472][ C1] sd 0:0:1:0: tag#413 CDB: opcode=0xe5 (vendor) [ 2997.205762][ C1] sd 0:0:1:0: tag#413 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.214726][ C1] sd 0:0:1:0: tag#413 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.223681][ C1] sd 0:0:1:0: tag#413 CDB[20]: ba [ 2997.266366][ C1] sd 0:0:1:0: tag#414 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.276169][ C1] sd 0:0:1:0: tag#414 CDB: opcode=0xe5 (vendor) [ 2997.282459][ C1] sd 0:0:1:0: tag#414 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.291387][ C1] sd 0:0:1:0: tag#414 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.300351][ C1] sd 0:0:1:0: tag#414 CDB[20]: ba [ 2997.312952][ C1] sd 0:0:1:0: tag#416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.322729][ C1] sd 0:0:1:0: tag#416 CDB: opcode=0xe5 (vendor) [ 2997.328986][ C1] sd 0:0:1:0: tag#416 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.337963][ C1] sd 0:0:1:0: tag#416 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.346922][ C1] sd 0:0:1:0: tag#416 CDB[20]: ba [ 2997.377225][ C1] sd 0:0:1:0: tag#418 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.387022][ C1] sd 0:0:1:0: tag#418 CDB: opcode=0xe5 (vendor) [ 2997.393287][ C1] sd 0:0:1:0: tag#418 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.402248][ C1] sd 0:0:1:0: tag#418 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.411179][ C1] sd 0:0:1:0: tag#418 CDB[20]: ba [ 2997.466436][ C1] sd 0:0:1:0: tag#420 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.476256][ C1] sd 0:0:1:0: tag#420 CDB: opcode=0xe5 (vendor) [ 2997.482538][ C1] sd 0:0:1:0: tag#420 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.491494][ C1] sd 0:0:1:0: tag#420 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.500892][ C1] sd 0:0:1:0: tag#420 CDB[20]: ba [ 2997.575065][ C1] sd 0:0:1:0: tag#422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2997.584862][ C1] sd 0:0:1:0: tag#422 CDB: opcode=0xe5 (vendor) [ 2997.591104][ C1] sd 0:0:1:0: tag#422 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.600069][ C1] sd 0:0:1:0: tag#422 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.609031][ C1] sd 0:0:1:0: tag#422 CDB[20]: ba [ 2997.614141][ C1] sd 0:0:1:0: tag#424 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 03:30:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2997.623895][ C1] sd 0:0:1:0: tag#424 CDB: opcode=0xe5 (vendor) [ 2997.630156][ C1] sd 0:0:1:0: tag#424 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2997.639129][ C1] sd 0:0:1:0: tag#424 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2997.648086][ C1] sd 0:0:1:0: tag#424 CDB[20]: ba 03:30:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x14, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x1ff, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @struct={0x5, 0x1ff}, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage, 0x0, 0xfffffffffffff003, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async, rerun: 64) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:41 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x4, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x0, @struct={0x0, 0x4}, 0x0, 0x1, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fa80)={0xff, [], 0x7, "13eae8519f07a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000566c0)={0x6, [], 0x2, "1a850d43eed41d"}) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 03:30:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x4, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x0, @struct={0x0, 0x4}, 0x0, 0x1, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fa80)={0xff, [], 0x7, "13eae8519f07a3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000566c0)={0x6, [], 0x2, "1a850d43eed41d"}) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0xffffffffffffffff) 03:30:45 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7fff, 0x7f, 0x7, 0x3, 0x80000001, 0x2, 0x5}, 0x0) r6 = fork() sched_setattr(r6, &(0x7f0000000140)={0x38, 0x3, 0x10000003, 0x1, 0x101, 0x7, 0x10001, 0x1, 0x8b, 0x1}, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="da9d3723d9038e1bf0ad9aca2153a155cc4a0a4badab23e726ac01d93a7ce10528b3c264c7123ca9ad3b4b78048a7ef024093448778f97d90d2a51cc62165d2ee30bebcf2c9fff66ba5b7e53386fc82d84569567bb037af30a52d621cdf8735a8df83d08c8b29d8b854f4fd266e6695d554fa2edd8d60be6cd951b01cd41aea2b85f1e467e79223c983a4ce47f02731bf526f72931dc2684e2bcbd1a49de8ddb43da5a96e0f934e2e3ab4e12f740b8ef250cfe5a6d606681587110a1c8cae19e1e7d06e9a1b4095e80dbe3769cf3ff69149c1eca067849e1738ac4d1289f551428006f9001862f", 0xe7}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = pidfd_open(r5, 0x0) sendfile(r7, r0, 0x0, 0x8080ffffff80) 03:30:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3002.864036][ C1] scsi_io_completion_action: 92 callbacks suppressed [ 3002.864060][ C1] sd 0:0:1:0: tag#425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3002.880519][ C1] sd 0:0:1:0: tag#425 CDB: opcode=0xe5 (vendor) [ 3002.886780][ C1] sd 0:0:1:0: tag#425 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3002.895766][ C1] sd 0:0:1:0: tag#425 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3002.904736][ C1] sd 0:0:1:0: tag#425 CDB[20]: ba 03:30:46 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7fff, 0x7f, 0x7, 0x3, 0x80000001, 0x2, 0x5}, 0x0) r6 = fork() sched_setattr(r6, &(0x7f0000000140)={0x38, 0x3, 0x10000003, 0x1, 0x101, 0x7, 0x10001, 0x1, 0x8b, 0x1}, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="da9d3723d9038e1bf0ad9aca2153a155cc4a0a4badab23e726ac01d93a7ce10528b3c264c7123ca9ad3b4b78048a7ef024093448778f97d90d2a51cc62165d2ee30bebcf2c9fff66ba5b7e53386fc82d84569567bb037af30a52d621cdf8735a8df83d08c8b29d8b854f4fd266e6695d554fa2edd8d60be6cd951b01cd41aea2b85f1e467e79223c983a4ce47f02731bf526f72931dc2684e2bcbd1a49de8ddb43da5a96e0f934e2e3ab4e12f740b8ef250cfe5a6d606681587110a1c8cae19e1e7d06e9a1b4095e80dbe3769cf3ff69149c1eca067849e1738ac4d1289f551428006f9001862f", 0xe7}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = pidfd_open(r5, 0x0) sendfile(r7, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000040)) (async) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7fff, 0x7f, 0x7, 0x3, 0x80000001, 0x2, 0x5}, 0x0) (async) fork() (async) sched_setattr(r6, &(0x7f0000000140)={0x38, 0x3, 0x10000003, 0x1, 0x101, 0x7, 0x10001, 0x1, 0x8b, 0x1}, 0x0) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="da9d3723d9038e1bf0ad9aca2153a155cc4a0a4badab23e726ac01d93a7ce10528b3c264c7123ca9ad3b4b78048a7ef024093448778f97d90d2a51cc62165d2ee30bebcf2c9fff66ba5b7e53386fc82d84569567bb037af30a52d621cdf8735a8df83d08c8b29d8b854f4fd266e6695d554fa2edd8d60be6cd951b01cd41aea2b85f1e467e79223c983a4ce47f02731bf526f72931dc2684e2bcbd1a49de8ddb43da5a96e0f934e2e3ab4e12f740b8ef250cfe5a6d606681587110a1c8cae19e1e7d06e9a1b4095e80dbe3769cf3ff69149c1eca067849e1738ac4d1289f551428006f9001862f", 0xe7}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) pidfd_open(r5, 0x0) (async) sendfile(r7, r0, 0x0, 0x8080ffffff80) (async) 03:30:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3003.223566][ C1] sd 0:0:1:0: tag#426 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3003.233341][ C1] sd 0:0:1:0: tag#426 CDB: opcode=0xe5 (vendor) [ 3003.239587][ C1] sd 0:0:1:0: tag#426 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3003.248562][ C1] sd 0:0:1:0: tag#426 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3003.257518][ C1] sd 0:0:1:0: tag#426 CDB[20]: ba 03:30:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:49 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x7fff, 0x7f, 0x7, 0x3, 0x80000001, 0x2, 0x5}, 0x0) (async) r6 = fork() sched_setattr(r6, &(0x7f0000000140)={0x38, 0x3, 0x10000003, 0x1, 0x101, 0x7, 0x10001, 0x1, 0x8b, 0x1}, 0x0) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="da9d3723d9038e1bf0ad9aca2153a155cc4a0a4badab23e726ac01d93a7ce10528b3c264c7123ca9ad3b4b78048a7ef024093448778f97d90d2a51cc62165d2ee30bebcf2c9fff66ba5b7e53386fc82d84569567bb037af30a52d621cdf8735a8df83d08c8b29d8b854f4fd266e6695d554fa2edd8d60be6cd951b01cd41aea2b85f1e467e79223c983a4ce47f02731bf526f72931dc2684e2bcbd1a49de8ddb43da5a96e0f934e2e3ab4e12f740b8ef250cfe5a6d606681587110a1c8cae19e1e7d06e9a1b4095e80dbe3769cf3ff69149c1eca067849e1738ac4d1289f551428006f9001862f", 0xe7}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r7 = pidfd_open(r5, 0x0) sendfile(r7, r0, 0x0, 0x8080ffffff80) 03:30:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x8001, 0xc7e1, 0x8, 0x7, 0xb4, 0x9, 0x40}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f80)={0x0, 0xd6, 0x0, [0x1ff, 0xffffffff, 0x7, 0x2129afa3, 0x6], [0x8000, 0x8, 0x6, 0xbb53, 0xfffffffffffffffa, 0xb9b, 0x75a, 0xe8e5, 0x9, 0x2, 0x0, 0x100000001, 0x40000, 0x2, 0x2, 0x8000, 0x6, 0x1, 0x800, 0x3, 0x200, 0xdfb3, 0x4, 0x1ff, 0x9, 0xffffffff, 0x4, 0x586, 0x6, 0x10000, 0x6, 0xe71e, 0x8001, 0x5, 0x428, 0x7d9, 0x7, 0xec2, 0x1000, 0x5, 0x3ff, 0x200000000000000, 0x7, 0x4, 0x40, 0x2, 0x0, 0x3, 0x7ff, 0x17ca061000000000, 0x3, 0xffffffffffff8001, 0x200, 0x80, 0x7fffffff, 0x7, 0x3f, 0x4, 0x5, 0x78f8, 0x800, 0xa5, 0x6, 0x1, 0x7, 0x8000, 0x40, 0x4, 0x9, 0xa9f, 0x4a, 0x1, 0x9, 0x0, 0x80000001, 0x9be6, 0x413, 0x7, 0x9, 0x2, 0x7ff, 0x3, 0x3f77, 0x7ff, 0xa9, 0x81, 0x1, 0xb9b, 0xb9, 0x9, 0x4, 0x5, 0x2, 0x9, 0x3, 0x1, 0x9, 0x7fff, 0x1, 0x0, 0x8b19, 0x58, 0x80000000, 0x5, 0x80, 0x4, 0x7fffffff, 0x4, 0x7, 0x284e246e, 0x9, 0x4, 0x0, 0x1b8ae253, 0x5, 0x0, 0xffff, 0x5, 0x8001, 0xffff, 0x2]}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './bus', [{0x20, ':'}, {0x20, '\x00'}], 0xa, "43cef90effa65ee46206749d2f60844acbe2e3861804d94797dddc1c568a3c858e737b4c3ae84b90a56316ec68317b094087749d48d81bb3fbccfe41d28bc8e5f7e0fb9126e2a7ea53d7cae077ca514d05f627a72bff27b772f72fa7ac798ed1d7a5dfcc16e8"}, 0x73) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056340)={0x8000, [], 0x9, "7139acb5237fcb"}) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3006.635003][ C0] sd 0:0:1:0: tag#437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3006.644790][ C0] sd 0:0:1:0: tag#437 CDB: opcode=0xe5 (vendor) [ 3006.651023][ C0] sd 0:0:1:0: tag#437 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3006.659978][ C0] sd 0:0:1:0: tag#437 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3006.668925][ C0] sd 0:0:1:0: tag#437 CDB[20]: ba [ 3009.325306][ C0] sd 0:0:1:0: tag#438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3009.325838][ C1] sd 0:0:1:0: tag#439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3009.335086][ C0] sd 0:0:1:0: tag#438 CDB: opcode=0xe5 (vendor) [ 3009.344830][ C1] sd 0:0:1:0: tag#439 CDB: opcode=0xe5 (vendor) [ 3009.351053][ C0] sd 0:0:1:0: tag#438 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3009.357296][ C1] sd 0:0:1:0: tag#439 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3009.366210][ C0] sd 0:0:1:0: tag#438 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3009.375148][ C1] sd 0:0:1:0: tag#439 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3009.384075][ C0] sd 0:0:1:0: tag#438 CDB[20]: ba [ 3009.393002][ C1] sd 0:0:1:0: tag#439 CDB[20]: ba 03:30:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056340)={0x8000, [], 0x9, "7139acb5237fcb"}) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056340)={0x8000, [], 0x9, "7139acb5237fcb"}) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3010.473518][ C0] sd 0:0:1:0: tag#441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3010.483291][ C0] sd 0:0:1:0: tag#441 CDB: opcode=0xe5 (vendor) [ 3010.489530][ C0] sd 0:0:1:0: tag#441 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3010.498480][ C0] sd 0:0:1:0: tag#441 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3010.507436][ C0] sd 0:0:1:0: tag#441 CDB[20]: ba 03:30:53 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x1000000a, 0x8, 0x7, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0xfffffbff}, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3010.669067][ C0] sd 0:0:1:0: tag#446 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3010.678831][ C0] sd 0:0:1:0: tag#446 CDB: opcode=0xe5 (vendor) [ 3010.685089][ C0] sd 0:0:1:0: tag#446 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3010.694041][ C0] sd 0:0:1:0: tag#446 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3010.703004][ C0] sd 0:0:1:0: tag#446 CDB[20]: ba 03:30:53 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 64) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) (async) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x1000000a, 0x8, 0x7, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0xfffffbff}, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3010.769740][ C0] sd 0:0:1:0: tag#447 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3010.779527][ C0] sd 0:0:1:0: tag#447 CDB: opcode=0xe5 (vendor) [ 3010.785817][ C0] sd 0:0:1:0: tag#447 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3010.794781][ C0] sd 0:0:1:0: tag#447 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3010.803732][ C0] sd 0:0:1:0: tag#447 CDB[20]: ba 03:30:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061dc0)={0x2, [], 0x9, "21f8dec452fb9f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056340)={0x8000, [], 0x9, "7139acb5237fcb"}) (async) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:30:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x8001, 0xc7e1, 0x8, 0x7, 0xb4, 0x9, 0x40}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f80)={0x0, 0xd6, 0x0, [0x1ff, 0xffffffff, 0x7, 0x2129afa3, 0x6], [0x8000, 0x8, 0x6, 0xbb53, 0xfffffffffffffffa, 0xb9b, 0x75a, 0xe8e5, 0x9, 0x2, 0x0, 0x100000001, 0x40000, 0x2, 0x2, 0x8000, 0x6, 0x1, 0x800, 0x3, 0x200, 0xdfb3, 0x4, 0x1ff, 0x9, 0xffffffff, 0x4, 0x586, 0x6, 0x10000, 0x6, 0xe71e, 0x8001, 0x5, 0x428, 0x7d9, 0x7, 0xec2, 0x1000, 0x5, 0x3ff, 0x200000000000000, 0x7, 0x4, 0x40, 0x2, 0x0, 0x3, 0x7ff, 0x17ca061000000000, 0x3, 0xffffffffffff8001, 0x200, 0x80, 0x7fffffff, 0x7, 0x3f, 0x4, 0x5, 0x78f8, 0x800, 0xa5, 0x6, 0x1, 0x7, 0x8000, 0x40, 0x4, 0x9, 0xa9f, 0x4a, 0x1, 0x9, 0x0, 0x80000001, 0x9be6, 0x413, 0x7, 0x9, 0x2, 0x7ff, 0x3, 0x3f77, 0x7ff, 0xa9, 0x81, 0x1, 0xb9b, 0xb9, 0x9, 0x4, 0x5, 0x2, 0x9, 0x3, 0x1, 0x9, 0x7fff, 0x1, 0x0, 0x8b19, 0x58, 0x80000000, 0x5, 0x80, 0x4, 0x7fffffff, 0x4, 0x7, 0x284e246e, 0x9, 0x4, 0x0, 0x1b8ae253, 0x5, 0x0, 0xffff, 0x5, 0x8001, 0xffff, 0x2]}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './bus', [{0x20, ':'}, {0x20, '\x00'}], 0xa, "43cef90effa65ee46206749d2f60844acbe2e3861804d94797dddc1c568a3c858e737b4c3ae84b90a56316ec68317b094087749d48d81bb3fbccfe41d28bc8e5f7e0fb9126e2a7ea53d7cae077ca514d05f627a72bff27b772f72fa7ac798ed1d7a5dfcc16e8"}, 0x73) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x8001, 0xc7e1, 0x8, 0x7, 0xb4, 0x9, 0x40}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f80)={0x0, 0xd6, 0x0, [0x1ff, 0xffffffff, 0x7, 0x2129afa3, 0x6], [0x8000, 0x8, 0x6, 0xbb53, 0xfffffffffffffffa, 0xb9b, 0x75a, 0xe8e5, 0x9, 0x2, 0x0, 0x100000001, 0x40000, 0x2, 0x2, 0x8000, 0x6, 0x1, 0x800, 0x3, 0x200, 0xdfb3, 0x4, 0x1ff, 0x9, 0xffffffff, 0x4, 0x586, 0x6, 0x10000, 0x6, 0xe71e, 0x8001, 0x5, 0x428, 0x7d9, 0x7, 0xec2, 0x1000, 0x5, 0x3ff, 0x200000000000000, 0x7, 0x4, 0x40, 0x2, 0x0, 0x3, 0x7ff, 0x17ca061000000000, 0x3, 0xffffffffffff8001, 0x200, 0x80, 0x7fffffff, 0x7, 0x3f, 0x4, 0x5, 0x78f8, 0x800, 0xa5, 0x6, 0x1, 0x7, 0x8000, 0x40, 0x4, 0x9, 0xa9f, 0x4a, 0x1, 0x9, 0x0, 0x80000001, 0x9be6, 0x413, 0x7, 0x9, 0x2, 0x7ff, 0x3, 0x3f77, 0x7ff, 0xa9, 0x81, 0x1, 0xb9b, 0xb9, 0x9, 0x4, 0x5, 0x2, 0x9, 0x3, 0x1, 0x9, 0x7fff, 0x1, 0x0, 0x8b19, 0x58, 0x80000000, 0x5, 0x80, 0x4, 0x7fffffff, 0x4, 0x7, 0x284e246e, 0x9, 0x4, 0x0, 0x1b8ae253, 0x5, 0x0, 0xffff, 0x5, 0x8001, 0xffff, 0x2]}) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './bus', [{0x20, ':'}, {0x20, '\x00'}], 0xa, "43cef90effa65ee46206749d2f60844acbe2e3861804d94797dddc1c568a3c858e737b4c3ae84b90a56316ec68317b094087749d48d81bb3fbccfe41d28bc8e5f7e0fb9126e2a7ea53d7cae077ca514d05f627a72bff27b772f72fa7ac798ed1d7a5dfcc16e8"}, 0x73) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:30:54 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) (async) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x1000000a, 0x8, 0x7, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0xfffffbff}, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:30:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3010.838603][ C1] sd 0:0:1:0: tag#385 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3010.848376][ C1] sd 0:0:1:0: tag#385 CDB: opcode=0xe5 (vendor) [ 3010.854684][ C1] sd 0:0:1:0: tag#385 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3010.863652][ C1] sd 0:0:1:0: tag#385 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3010.872586][ C1] sd 0:0:1:0: tag#385 CDB[20]: ba 03:30:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3012.343913][ C1] sd 0:0:1:0: tag#388 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3012.353713][ C1] sd 0:0:1:0: tag#388 CDB: opcode=0xe5 (vendor) [ 3012.359943][ C1] sd 0:0:1:0: tag#388 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3012.368899][ C1] sd 0:0:1:0: tag#388 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3012.377840][ C1] sd 0:0:1:0: tag#388 CDB[20]: ba 03:30:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0xffffffffffffff17, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) r6 = fsmount(r2, 0x0, 0x8a) sendfile(r6, r2, &(0x7f0000000040)=0x81, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3014.325413][ C1] sd 0:0:1:0: tag#393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3014.335226][ C1] sd 0:0:1:0: tag#393 CDB: opcode=0xe5 (vendor) [ 3014.341470][ C1] sd 0:0:1:0: tag#393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3014.350457][ C1] sd 0:0:1:0: tag#393 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3014.359415][ C1] sd 0:0:1:0: tag#393 CDB[20]: ba [ 3014.365060][ C0] sd 0:0:1:0: tag#394 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3014.374829][ C0] sd 0:0:1:0: tag#394 CDB: opcode=0xe5 (vendor) [ 3014.381086][ C0] sd 0:0:1:0: tag#394 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3014.390061][ C0] sd 0:0:1:0: tag#394 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3014.399039][ C0] sd 0:0:1:0: tag#394 CDB[20]: ba 03:30:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x100, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="f25ef190f7b6c30d4f59442844eba6b8d9740fc5261407aa4e615d7d22cea5044086655c7c3ce854ab098353c183694751acbf58b3ac99280497b44172656b4f7c4813e456621909d5953437f62e908ef324d1463c2144daafdee5ff6bd224564ceeee3afff98a7b29fb2bffa13d91ccdcb50219976be8eadc2e9ac29d3712eaff96390d3470eea93038efaea0287d3de6060cb3dcc925f5f02cd7", 0x9b, 0x3}, {&(0x7f00000001c0)="4068324789306fb5745869d71815e12d3d09209d748a118bcba8c13429bb3fb272aa4944251dbb7e04f03516d8c9", 0x2e, 0x1000}, {&(0x7f0000000300)="7c97cc4e4152cba04dcaec387a43ba80d8dda19d25039b04b7fa5abb79cb43e6542455f93b5cb6403df09068b4a97f9d6ced854ed5d91752b7610a6f47b9cbda7c1effbc357597bbedf9117977e3b177a0e3a0d47696e31afa1959fd5041694c28bd4427d9491256cb2c6ec4afaf789060975f784e19d759e60058ed93864e566ecbc42d55e5236347", 0x89, 0x1}, {&(0x7f0000000240)="4a6b6e27997f73a0c9b99b802f61c26932df4b0ebb1e54629f0037182104dda46d1028cc833c1a1365727ef83fb3929f9c0c265a600ef980206f2ac7e16dee2ac420deb5a5f397f2ed39148c19fd887a25469612c89317547f03d8f0c17f", 0x5e, 0x100}, {&(0x7f0000000440)="437adadc31171944e2711790e551ad24d97ae664b3f77a9cbd2c3549e83fdb5c2ec2281aa5824ccf6b9fa70270e98acef855929fef03edfa133bf1e3743252a66b890457ee6719df6ae6e2", 0x4b, 0x400}], 0x800006, &(0x7f0000000580)={[{@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.&'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]}) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './bus\x00'}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) 03:30:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3014.507486][T24581] loop1: detected capacity change from 0 to 16 03:30:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3014.549916][T24581] FAT-fs (loop1): Unrecognized mount option "subj_role=^.&" or missing value [ 3014.581365][ C0] sd 0:0:1:0: tag#395 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3014.591166][ C0] sd 0:0:1:0: tag#395 CDB: opcode=0xe5 (vendor) [ 3014.597438][ C0] sd 0:0:1:0: tag#395 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3014.606394][ C0] sd 0:0:1:0: tag#395 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3014.615348][ C0] sd 0:0:1:0: tag#395 CDB[20]: ba 03:30:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0xffffffffffffff17, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 32) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 32) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 32) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async, rerun: 32) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async, rerun: 32) r6 = fsmount(r2, 0x0, 0x8a) sendfile(r6, r2, &(0x7f0000000040)=0x81, 0x2) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 64) creat(&(0x7f0000000740)='./bus\x00', 0x0) (rerun: 64) [ 3016.347463][ C1] sd 0:0:1:0: tag#396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3016.357248][ C1] sd 0:0:1:0: tag#396 CDB: opcode=0xe5 (vendor) [ 3016.363547][ C1] sd 0:0:1:0: tag#396 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3016.372523][ C1] sd 0:0:1:0: tag#396 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3016.381456][ C1] sd 0:0:1:0: tag#396 CDB[20]: ba 03:31:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x3, 0x8, 0x8001, 0xc7e1, 0x8, 0x7, 0xb4, 0x9, 0x40}, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f80)={0x0, 0xd6, 0x0, [0x1ff, 0xffffffff, 0x7, 0x2129afa3, 0x6], [0x8000, 0x8, 0x6, 0xbb53, 0xfffffffffffffffa, 0xb9b, 0x75a, 0xe8e5, 0x9, 0x2, 0x0, 0x100000001, 0x40000, 0x2, 0x2, 0x8000, 0x6, 0x1, 0x800, 0x3, 0x200, 0xdfb3, 0x4, 0x1ff, 0x9, 0xffffffff, 0x4, 0x586, 0x6, 0x10000, 0x6, 0xe71e, 0x8001, 0x5, 0x428, 0x7d9, 0x7, 0xec2, 0x1000, 0x5, 0x3ff, 0x200000000000000, 0x7, 0x4, 0x40, 0x2, 0x0, 0x3, 0x7ff, 0x17ca061000000000, 0x3, 0xffffffffffff8001, 0x200, 0x80, 0x7fffffff, 0x7, 0x3f, 0x4, 0x5, 0x78f8, 0x800, 0xa5, 0x6, 0x1, 0x7, 0x8000, 0x40, 0x4, 0x9, 0xa9f, 0x4a, 0x1, 0x9, 0x0, 0x80000001, 0x9be6, 0x413, 0x7, 0x9, 0x2, 0x7ff, 0x3, 0x3f77, 0x7ff, 0xa9, 0x81, 0x1, 0xb9b, 0xb9, 0x9, 0x4, 0x5, 0x2, 0x9, 0x3, 0x1, 0x9, 0x7fff, 0x1, 0x0, 0x8b19, 0x58, 0x80000000, 0x5, 0x80, 0x4, 0x7fffffff, 0x4, 0x7, 0x284e246e, 0x9, 0x4, 0x0, 0x1b8ae253, 0x5, 0x0, 0xffff, 0x5, 0x8001, 0xffff, 0x2]}) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './bus', [{0x20, ':'}, {0x20, '\x00'}], 0xa, "43cef90effa65ee46206749d2f60844acbe2e3861804d94797dddc1c568a3c858e737b4c3ae84b90a56316ec68317b094087749d48d81bb3fbccfe41d28bc8e5f7e0fb9126e2a7ea53d7cae077ca514d05f627a72bff27b772f72fa7ac798ed1d7a5dfcc16e8"}, 0x73) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0xffffffffffffff17, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) r6 = fsmount(r2, 0x0, 0x8a) sendfile(r6, r2, &(0x7f0000000040)=0x81, 0x2) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:00 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x100, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="f25ef190f7b6c30d4f59442844eba6b8d9740fc5261407aa4e615d7d22cea5044086655c7c3ce854ab098353c183694751acbf58b3ac99280497b44172656b4f7c4813e456621909d5953437f62e908ef324d1463c2144daafdee5ff6bd224564ceeee3afff98a7b29fb2bffa13d91ccdcb50219976be8eadc2e9ac29d3712eaff96390d3470eea93038efaea0287d3de6060cb3dcc925f5f02cd7", 0x9b, 0x3}, {&(0x7f00000001c0)="4068324789306fb5745869d71815e12d3d09209d748a118bcba8c13429bb3fb272aa4944251dbb7e04f03516d8c9", 0x2e, 0x1000}, {&(0x7f0000000300)="7c97cc4e4152cba04dcaec387a43ba80d8dda19d25039b04b7fa5abb79cb43e6542455f93b5cb6403df09068b4a97f9d6ced854ed5d91752b7610a6f47b9cbda7c1effbc357597bbedf9117977e3b177a0e3a0d47696e31afa1959fd5041694c28bd4427d9491256cb2c6ec4afaf789060975f784e19d759e60058ed93864e566ecbc42d55e5236347", 0x89, 0x1}, {&(0x7f0000000240)="4a6b6e27997f73a0c9b99b802f61c26932df4b0ebb1e54629f0037182104dda46d1028cc833c1a1365727ef83fb3929f9c0c265a600ef980206f2ac7e16dee2ac420deb5a5f397f2ed39148c19fd887a25469612c89317547f03d8f0c17f", 0x5e, 0x100}, {&(0x7f0000000440)="437adadc31171944e2711790e551ad24d97ae664b3f77a9cbd2c3549e83fdb5c2ec2281aa5824ccf6b9fa70270e98acef855929fef03edfa133bf1e3743252a66b890457ee6719df6ae6e2", 0x4b, 0x400}], 0x800006, &(0x7f0000000580)={[{@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.&'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]}) (async) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './bus\x00'}) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x8080ffffff80) [ 3017.471220][T24605] loop1: detected capacity change from 0 to 16 [ 3017.478347][T24605] FAT-fs (loop1): Unrecognized mount option "subj_role=^.&" or missing value [ 3017.479708][ C0] sd 0:0:1:0: tag#400 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3017.496954][ C0] sd 0:0:1:0: tag#400 CDB: opcode=0xe5 (vendor) [ 3017.503223][ C0] sd 0:0:1:0: tag#400 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3017.503982][ C1] sd 0:0:1:0: tag#403 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3017.512193][ C0] sd 0:0:1:0: tag#400 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3017.521867][ C1] sd 0:0:1:0: tag#403 CDB: opcode=0xe5 (vendor) [ 3017.530816][ C0] sd 0:0:1:0: tag#400 CDB[20]: ba [ 3017.537043][ C1] sd 0:0:1:0: tag#403 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3017.550986][ C1] sd 0:0:1:0: tag#403 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3017.559968][ C1] sd 0:0:1:0: tag#403 CDB[20]: ba 03:31:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000240)) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3017.746974][ C0] sd 0:0:1:0: tag#408 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3017.751801][ C1] sd 0:0:1:0: tag#409 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3017.756761][ C0] sd 0:0:1:0: tag#408 CDB: opcode=0xe5 (vendor) [ 3017.766483][ C1] sd 0:0:1:0: tag#409 CDB: opcode=0xe5 (vendor) [ 3017.772712][ C0] sd 0:0:1:0: tag#408 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3017.778927][ C1] sd 0:0:1:0: tag#409 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3017.787848][ C0] sd 0:0:1:0: tag#408 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3017.796777][ C1] sd 0:0:1:0: tag#409 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3017.805702][ C0] sd 0:0:1:0: tag#408 CDB[20]: ba [ 3017.814639][ C1] sd 0:0:1:0: tag#409 CDB[20]: ba 03:31:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x20004200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f00000002c0)="da", 0x1, 0x0, 0x0, 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:02 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x100, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="f25ef190f7b6c30d4f59442844eba6b8d9740fc5261407aa4e615d7d22cea5044086655c7c3ce854ab098353c183694751acbf58b3ac99280497b44172656b4f7c4813e456621909d5953437f62e908ef324d1463c2144daafdee5ff6bd224564ceeee3afff98a7b29fb2bffa13d91ccdcb50219976be8eadc2e9ac29d3712eaff96390d3470eea93038efaea0287d3de6060cb3dcc925f5f02cd7", 0x9b, 0x3}, {&(0x7f00000001c0)="4068324789306fb5745869d71815e12d3d09209d748a118bcba8c13429bb3fb272aa4944251dbb7e04f03516d8c9", 0x2e, 0x1000}, {&(0x7f0000000300)="7c97cc4e4152cba04dcaec387a43ba80d8dda19d25039b04b7fa5abb79cb43e6542455f93b5cb6403df09068b4a97f9d6ced854ed5d91752b7610a6f47b9cbda7c1effbc357597bbedf9117977e3b177a0e3a0d47696e31afa1959fd5041694c28bd4427d9491256cb2c6ec4afaf789060975f784e19d759e60058ed93864e566ecbc42d55e5236347", 0x89, 0x1}, {&(0x7f0000000240)="4a6b6e27997f73a0c9b99b802f61c26932df4b0ebb1e54629f0037182104dda46d1028cc833c1a1365727ef83fb3929f9c0c265a600ef980206f2ac7e16dee2ac420deb5a5f397f2ed39148c19fd887a25469612c89317547f03d8f0c17f", 0x5e, 0x100}, {&(0x7f0000000440)="437adadc31171944e2711790e551ad24d97ae664b3f77a9cbd2c3549e83fdb5c2ec2281aa5824ccf6b9fa70270e98acef855929fef03edfa133bf1e3743252a66b890457ee6719df6ae6e2", 0x4b, 0x400}], 0x800006, &(0x7f0000000580)={[{@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.&'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]}) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './bus\x00'}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x100, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="f25ef190f7b6c30d4f59442844eba6b8d9740fc5261407aa4e615d7d22cea5044086655c7c3ce854ab098353c183694751acbf58b3ac99280497b44172656b4f7c4813e456621909d5953437f62e908ef324d1463c2144daafdee5ff6bd224564ceeee3afff98a7b29fb2bffa13d91ccdcb50219976be8eadc2e9ac29d3712eaff96390d3470eea93038efaea0287d3de6060cb3dcc925f5f02cd7", 0x9b, 0x3}, {&(0x7f00000001c0)="4068324789306fb5745869d71815e12d3d09209d748a118bcba8c13429bb3fb272aa4944251dbb7e04f03516d8c9", 0x2e, 0x1000}, {&(0x7f0000000300)="7c97cc4e4152cba04dcaec387a43ba80d8dda19d25039b04b7fa5abb79cb43e6542455f93b5cb6403df09068b4a97f9d6ced854ed5d91752b7610a6f47b9cbda7c1effbc357597bbedf9117977e3b177a0e3a0d47696e31afa1959fd5041694c28bd4427d9491256cb2c6ec4afaf789060975f784e19d759e60058ed93864e566ecbc42d55e5236347", 0x89, 0x1}, {&(0x7f0000000240)="4a6b6e27997f73a0c9b99b802f61c26932df4b0ebb1e54629f0037182104dda46d1028cc833c1a1365727ef83fb3929f9c0c265a600ef980206f2ac7e16dee2ac420deb5a5f397f2ed39148c19fd887a25469612c89317547f03d8f0c17f", 0x5e, 0x100}, {&(0x7f0000000440)="437adadc31171944e2711790e551ad24d97ae664b3f77a9cbd2c3549e83fdb5c2ec2281aa5824ccf6b9fa70270e98acef855929fef03edfa133bf1e3743252a66b890457ee6719df6ae6e2", 0x4b, 0x400}], 0x800006, &(0x7f0000000580)={[{@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.&'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]}) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r4, 0x0, r4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './bus\x00'}) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x8080ffffff80) (async) [ 3019.346214][T24632] loop1: detected capacity change from 0 to 16 [ 3019.354234][T24632] FAT-fs (loop1): Unrecognized mount option "subj_role=^.&" or missing value 03:31:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3020.338659][ C1] sd 0:0:1:0: tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3020.348440][ C1] sd 0:0:1:0: tag#410 CDB: opcode=0xe5 (vendor) [ 3020.354697][ C1] sd 0:0:1:0: tag#410 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3020.363629][ C1] sd 0:0:1:0: tag#410 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3020.372567][ C1] sd 0:0:1:0: tag#410 CDB[20]: ba [ 3020.379751][ C0] sd 0:0:1:0: tag#411 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3020.389531][ C0] sd 0:0:1:0: tag#411 CDB: opcode=0xe5 (vendor) [ 3020.395817][ C0] sd 0:0:1:0: tag#411 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3020.405125][ C0] sd 0:0:1:0: tag#411 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3020.414067][ C0] sd 0:0:1:0: tag#411 CDB[20]: ba 03:31:06 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) readahead(r4, 0x80000000000000, 0x6) setrlimit(0x5, &(0x7f0000000040)={0x5a, 0x3f}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x200) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 64) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 64) lseek(r1, 0x20004200, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (rerun: 32) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f00000002c0)="da", 0x1, 0x0, 0x0, 0x1}]) (async, rerun: 32) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (rerun: 32) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3023.478025][ C1] sd 0:0:1:0: tag#392 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3023.487836][ C1] sd 0:0:1:0: tag#392 CDB: opcode=0xe5 (vendor) [ 3023.494115][ C1] sd 0:0:1:0: tag#392 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3023.503073][ C1] sd 0:0:1:0: tag#392 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3023.512020][ C1] sd 0:0:1:0: tag#392 CDB[20]: ba 03:31:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000240)) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000240)) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r3, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:08 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) readahead(r4, 0x80000000000000, 0x6) setrlimit(0x5, &(0x7f0000000040)={0x5a, 0x3f}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x200) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r4, 0x0, r4) (async) readahead(r4, 0x80000000000000, 0x6) (async) setrlimit(0x5, &(0x7f0000000040)={0x5a, 0x3f}) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r5, 0x0, r5) (async) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x200) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:31:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1cd}, 0x6044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x9, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x7, 0x200, 0x7fff, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x400, 0x4, 0x1000, 0x74, 0x11, @usage=0x1, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35a, 0x6, 0x2, 0x81, 0x59, @struct={0xffc, 0x4}, 0x8, 0x5, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) write(r1, &(0x7f0000001440)="e5bfed76e5a2d04982c94843fa3a6f5e1bb2a17781be689f768ba48f21a65f5abfe600d8f99f775e1a280aa635d8bd6d074933d8ac81943504af9fe8016e1af33fe1a43ac590f8f14c1eb2bd92fad44f92c019f6b96832b6d511dbcb8e36fa6261b99ff2ed1de379c64b3e8e6d8bea4a80f97a911f994efd366f6411c8ea55dbc9317699c1b693c718d9c3d0e15f95fc5825c6b4437cf07db02d5c7222ba3055", 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x6, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000300)="26cddb89d796034df76c3055300ae403ba1a077cab794226ccd119c42ffb8aeb41edd5ec6d65cde56b95465a5c8f32d983e9d2a74390bd5a5ffb1d76d45540122a322e925f3de4a713acdbadd6349865e5d8ed75ccaecac7f9", 0x59, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x59, r6, &(0x7f0000001500)="ef99db97bff05e33cdd24186db1aa992b1cc4cb9527343e9c8f81faab9dea68750416228ce5d6d903c8bfb08e1d96e58a38c6ba2c53c30349c1ff06750e9baf5b2efd3f3df1e8a0d1be77bec5caa310d39eb1420b12be1262c302b21418e330e4ea7cb", 0x63, 0xffffffffffffff7f}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001600)="cb1d4fcc43e9783156602d6bd9d215de20e9bcf521ceb4f7c11bb83915da38e738aaad269020ccb3ee24ed31de021bd8cb12414fcdd77d51d3318307d3aca6cc6359e28cbdfd553f68e13d93090b7e44b3f3d0fb6e56fa15aedc1e93b1d14a4faf86e780b279ef27fa7423eacb7cec125ee5efa67ee066337d640c7dd0e0f867b3a1f1da5d8e1039b2e7fa0569a690ae8d244d813f326181bd02122ceb371313ea9a83e04ce0395374ed102b2336604a9ba2f365120bbe2178d618fbc3d21a53c90988ace2d0d24dba2a5c197aa7d2c66d5524c22dd33912572090f2ee168507eb7204ccd0", 0xe5, 0x3, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001980)="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", 0x1000, 0x6}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001780)="d3e48ee7b0af65ee4510ebca81c4d7501f4d28278114e69ceecdba4f9d730c0e59525fe3f2c11071bde5d84768a37fce0527fe00dd83501be122509019a58ab4aef1bb678da29a71a3ca42bfa0a9357f006926ba383f90f73cbdbf1026302cfd61e3660c9b1ca5fbbfa3221bdbfc577aaf6f7000bca31a997c33bf39fb411f0e49a2ad2643c1b8227fae250976810e1ab36294dcf988d0d96d5332b3e825a618e9269ebb64", 0xa5, 0x100000000, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000002980)="2ec506f1851ea65ae3e968d74eb5273a62ad4479aa1654386564efcd8edf6a15c7b6e45797080826b4720349e014bb930b59e78a0b9753571b1426355aaa8f80bf13d00fd96cbe4bd8cacf260ba214d475c23e57bba32af4d873d89e247dacba200452e3aa0ec5bd6cd3db6c0e67139b78d28ea47a34ceda08988fe63737c6668922db000dff2c7ffc41addb770edc7495423817bd5854598b923b25dd3357d179511d6069e782bd98", 0xa9, 0x7, 0x0, 0x1, r3}]) 03:31:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x20004200, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (rerun: 64) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f00000002c0)="da", 0x1, 0x0, 0x0, 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3026.455867][ C1] sd 0:0:1:0: tag#406 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3026.465692][ C1] sd 0:0:1:0: tag#406 CDB: opcode=0xe5 (vendor) [ 3026.471939][ C1] sd 0:0:1:0: tag#406 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3026.480911][ C1] sd 0:0:1:0: tag#406 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3026.489870][ C1] sd 0:0:1:0: tag#406 CDB[20]: ba [ 3028.357933][ C1] sd 0:0:1:0: tag#407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3028.367735][ C1] sd 0:0:1:0: tag#407 CDB: opcode=0xe5 (vendor) [ 3028.374012][ C1] sd 0:0:1:0: tag#407 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3028.383119][ C1] sd 0:0:1:0: tag#407 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3028.392115][ C1] sd 0:0:1:0: tag#407 CDB[20]: ba 03:31:11 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r4, 0x0, r4) readahead(r4, 0x80000000000000, 0x6) setrlimit(0x5, &(0x7f0000000040)={0x5a, 0x3f}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x200) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x2) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r4, 0x0, r4) (async) readahead(r4, 0x80000000000000, 0x6) (async) setrlimit(0x5, &(0x7f0000000040)={0x5a, 0x3f}) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r5, 0x0, r5) (async) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x200) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:31:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000240)) (async) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) (async) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x100) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 3028.786199][ C0] sd 0:0:1:0: tag#478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3028.795983][ C0] sd 0:0:1:0: tag#478 CDB: opcode=0xe5 (vendor) [ 3028.802241][ C0] sd 0:0:1:0: tag#478 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3028.811187][ C0] sd 0:0:1:0: tag#478 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3028.820163][ C0] sd 0:0:1:0: tag#478 CDB[20]: ba [ 3028.831992][ C1] sd 0:0:1:0: tag#472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3028.841795][ C1] sd 0:0:1:0: tag#472 CDB: opcode=0xe5 (vendor) [ 3028.848075][ C1] sd 0:0:1:0: tag#472 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3028.857045][ C1] sd 0:0:1:0: tag#472 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3028.866033][ C1] sd 0:0:1:0: tag#472 CDB[20]: ba 03:31:14 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000040)) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x2) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x80000001, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7fff, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001c40)=@raw={0xb4, 0x0, {"5bae336b79d1e8a0a0a3f7a09433839742686ff44f81b19e1d695f0ab2e4fe2060cd98f6f9b57aa892ce294e42da1f9d260a9b8485df0eed25d94b84d49d538571094bf144c5f71d8805172754c37f32307ff9c45dfffea45b74a3ea755a4fae72820d1de3c42f3a26f55a878cdec9a8840bf0c56f40be9e9cdb191f85162fb46417912fd00d9c6b44fa3c63df15c0443b78daf148ac79ecc182387ad141e99ae64e8b7a249f64f06c4c8dcb2e4c09abbc"}}, 0x282) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x8, &(0x7f0000001c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001500)="b47c915d49d6470099a8c3d5e6e8da4831b2fb39d7428d3fb4bee93095578c9a2ac238b4e7d8ab54b0e88f70f50b04a0f383bafa4ef0b64b8ef49f042d20d5bcf8184a0588690b5cd4d1ecc7439a0cf35ee604fcb198090b928565914949364478d9f0b0113779292883d43a9b2c30ed7e87d372e3a91826f76fdca31c1c528feef506c0", 0x84, 0x2, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xa009, r2, &(0x7f00000015c0)="0a8f542d603d2a2732b2eea3ed5e0b14f064a0ae964d201b7fe8a9edc8ae3456e3305bf48badc20a997140588a1a63a8e7f770136c736ec7947d0001439ae4bbbd93f714679a6a32f7c4f3575251c93a1ca6234501313a2e2634d93c31f67f0f917408e52e6011ae9afb7529c5efb8a53c2bb5683356ba40736b47522e9176927c60483ff5218577fc9ab8e58c", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffe1, r0, &(0x7f0000001680)="27df30147319eb2987228955ff353f9e04cc9d9f0b7e474526e9d4e8e9873ef2012c946a397a1fd43a975b8196d30b534b7cee029840ea940f3d190a5dae4b8b1cadebab484afc56291d7ab38745e7b5877976a1b6e75853469740e7b5b7655ab477d548bff99abf31fa9ec76cab88a5d24aeb80d2b1382a8ae0adc914c95cb5b5954854c5553a239e2ae87a0dc5ec00611e2d9f73b537381afa5e575afea7e15d889e8b709b7e34e2f028ff619033495aefd47cfcdf938b8d441881c9b452ab91aad9605a24a7c23802165dac0c8ec9762c3ed8e3e8f84c540997d397", 0xdd, 0xd6b3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001780)="c56f8acc2782b0b8bb0fc931088cefabbe7d379331d7c7c0856825f0ca7ba5444f4e25f5e992c03ca4399f1d011f011eee72f1494ed6fd81327d142cc7987e607e486b155edd025494e28921d887170abb6fe6c5b44431bfe5e4772c43a8a44d266aefffdb7ee85344d303abe2348c47a84162d498df048689129af73dd7f62110b72445e9bac8fdb24e3f1d9a", 0x8d, 0x2, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x9, 0x5, r2, &(0x7f0000001840)="6c278393d31459a0a0eec12f", 0xc, 0x5e, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f00000018c0)="6dec806d62feea561f8a5e9a1d21d60a91fa91ba8be9b7f3abf549de9159b3b1c2", 0x21, 0x5, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x900, r5, &(0x7f00000019c0)="a88e73369f33bd07d6d5901b8aab0240a837fda4b2e257ad1441b775284bec27ba47476590f7a60f9a74f56741779f9181db1ffd8012", 0x36, 0x0, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="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", 0xfd, 0x4}]) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3031.450212][ C0] sd 0:0:1:0: tag#490 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3031.460011][ C0] sd 0:0:1:0: tag#490 CDB: opcode=0xe5 (vendor) [ 3031.466293][ C0] sd 0:0:1:0: tag#490 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3031.475255][ C0] sd 0:0:1:0: tag#490 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3031.484208][ C0] sd 0:0:1:0: tag#490 CDB[20]: ba 03:31:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) getrlimit(0x1, &(0x7f0000000040)) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x2) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x100) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x100) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) [ 3033.637243][ C0] sd 0:0:1:0: tag#448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3033.647016][ C0] sd 0:0:1:0: tag#448 CDB: opcode=0xe5 (vendor) [ 3033.653283][ C0] sd 0:0:1:0: tag#448 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3033.662235][ C0] sd 0:0:1:0: tag#448 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3033.671174][ C0] sd 0:0:1:0: tag#448 CDB[20]: ba 03:31:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1cd}, 0x6044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x9, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x7, 0x200, 0x7fff, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x400, 0x4, 0x1000, 0x74, 0x11, @usage=0x1, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35a, 0x6, 0x2, 0x81, 0x59, @struct={0xffc, 0x4}, 0x8, 0x5, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) write(r1, &(0x7f0000001440)="e5bfed76e5a2d04982c94843fa3a6f5e1bb2a17781be689f768ba48f21a65f5abfe600d8f99f775e1a280aa635d8bd6d074933d8ac81943504af9fe8016e1af33fe1a43ac590f8f14c1eb2bd92fad44f92c019f6b96832b6d511dbcb8e36fa6261b99ff2ed1de379c64b3e8e6d8bea4a80f97a911f994efd366f6411c8ea55dbc9317699c1b693c718d9c3d0e15f95fc5825c6b4437cf07db02d5c7222ba3055", 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x6, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000300)="26cddb89d796034df76c3055300ae403ba1a077cab794226ccd119c42ffb8aeb41edd5ec6d65cde56b95465a5c8f32d983e9d2a74390bd5a5ffb1d76d45540122a322e925f3de4a713acdbadd6349865e5d8ed75ccaecac7f9", 0x59, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x59, r6, &(0x7f0000001500)="ef99db97bff05e33cdd24186db1aa992b1cc4cb9527343e9c8f81faab9dea68750416228ce5d6d903c8bfb08e1d96e58a38c6ba2c53c30349c1ff06750e9baf5b2efd3f3df1e8a0d1be77bec5caa310d39eb1420b12be1262c302b21418e330e4ea7cb", 0x63, 0xffffffffffffff7f}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001600)="cb1d4fcc43e9783156602d6bd9d215de20e9bcf521ceb4f7c11bb83915da38e738aaad269020ccb3ee24ed31de021bd8cb12414fcdd77d51d3318307d3aca6cc6359e28cbdfd553f68e13d93090b7e44b3f3d0fb6e56fa15aedc1e93b1d14a4faf86e780b279ef27fa7423eacb7cec125ee5efa67ee066337d640c7dd0e0f867b3a1f1da5d8e1039b2e7fa0569a690ae8d244d813f326181bd02122ceb371313ea9a83e04ce0395374ed102b2336604a9ba2f365120bbe2178d618fbc3d21a53c90988ace2d0d24dba2a5c197aa7d2c66d5524c22dd33912572090f2ee168507eb7204ccd0", 0xe5, 0x3, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001980)="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", 0x1000, 0x6}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001780)="d3e48ee7b0af65ee4510ebca81c4d7501f4d28278114e69ceecdba4f9d730c0e59525fe3f2c11071bde5d84768a37fce0527fe00dd83501be122509019a58ab4aef1bb678da29a71a3ca42bfa0a9357f006926ba383f90f73cbdbf1026302cfd61e3660c9b1ca5fbbfa3221bdbfc577aaf6f7000bca31a997c33bf39fb411f0e49a2ad2643c1b8227fae250976810e1ab36294dcf988d0d96d5332b3e825a618e9269ebb64", 0xa5, 0x100000000, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000002980)="2ec506f1851ea65ae3e968d74eb5273a62ad4479aa1654386564efcd8edf6a15c7b6e45797080826b4720349e014bb930b59e78a0b9753571b1426355aaa8f80bf13d00fd96cbe4bd8cacf260ba214d475c23e57bba32af4d873d89e247dacba200452e3aa0ec5bd6cd3db6c0e67139b78d28ea47a34ceda08988fe63737c6668922db000dff2c7ffc41addb770edc7495423817bd5854598b923b25dd3357d179511d6069e782bd98", 0xa9, 0x7, 0x0, 0x1, r3}]) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1cd}, 0x6044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x9, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x7, 0x200, 0x7fff, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x400, 0x4, 0x1000, 0x74, 0x11, @usage=0x1, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35a, 0x6, 0x2, 0x81, 0x59, @struct={0xffc, 0x4}, 0x8, 0x5, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) write(r1, &(0x7f0000001440)="e5bfed76e5a2d04982c94843fa3a6f5e1bb2a17781be689f768ba48f21a65f5abfe600d8f99f775e1a280aa635d8bd6d074933d8ac81943504af9fe8016e1af33fe1a43ac590f8f14c1eb2bd92fad44f92c019f6b96832b6d511dbcb8e36fa6261b99ff2ed1de379c64b3e8e6d8bea4a80f97a911f994efd366f6411c8ea55dbc9317699c1b693c718d9c3d0e15f95fc5825c6b4437cf07db02d5c7222ba3055", 0xa0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) io_submit(0x0, 0x6, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000300)="26cddb89d796034df76c3055300ae403ba1a077cab794226ccd119c42ffb8aeb41edd5ec6d65cde56b95465a5c8f32d983e9d2a74390bd5a5ffb1d76d45540122a322e925f3de4a713acdbadd6349865e5d8ed75ccaecac7f9", 0x59, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x59, r6, &(0x7f0000001500)="ef99db97bff05e33cdd24186db1aa992b1cc4cb9527343e9c8f81faab9dea68750416228ce5d6d903c8bfb08e1d96e58a38c6ba2c53c30349c1ff06750e9baf5b2efd3f3df1e8a0d1be77bec5caa310d39eb1420b12be1262c302b21418e330e4ea7cb", 0x63, 0xffffffffffffff7f}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001600)="cb1d4fcc43e9783156602d6bd9d215de20e9bcf521ceb4f7c11bb83915da38e738aaad269020ccb3ee24ed31de021bd8cb12414fcdd77d51d3318307d3aca6cc6359e28cbdfd553f68e13d93090b7e44b3f3d0fb6e56fa15aedc1e93b1d14a4faf86e780b279ef27fa7423eacb7cec125ee5efa67ee066337d640c7dd0e0f867b3a1f1da5d8e1039b2e7fa0569a690ae8d244d813f326181bd02122ceb371313ea9a83e04ce0395374ed102b2336604a9ba2f365120bbe2178d618fbc3d21a53c90988ace2d0d24dba2a5c197aa7d2c66d5524c22dd33912572090f2ee168507eb7204ccd0", 0xe5, 0x3, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001980)="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", 0x1000, 0x6}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001780)="d3e48ee7b0af65ee4510ebca81c4d7501f4d28278114e69ceecdba4f9d730c0e59525fe3f2c11071bde5d84768a37fce0527fe00dd83501be122509019a58ab4aef1bb678da29a71a3ca42bfa0a9357f006926ba383f90f73cbdbf1026302cfd61e3660c9b1ca5fbbfa3221bdbfc577aaf6f7000bca31a997c33bf39fb411f0e49a2ad2643c1b8227fae250976810e1ab36294dcf988d0d96d5332b3e825a618e9269ebb64", 0xa5, 0x100000000, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000002980)="2ec506f1851ea65ae3e968d74eb5273a62ad4479aa1654386564efcd8edf6a15c7b6e45797080826b4720349e014bb930b59e78a0b9753571b1426355aaa8f80bf13d00fd96cbe4bd8cacf260ba214d475c23e57bba32af4d873d89e247dacba200452e3aa0ec5bd6cd3db6c0e67139b78d28ea47a34ceda08988fe63737c6668922db000dff2c7ffc41addb770edc7495423817bd5854598b923b25dd3357d179511d6069e782bd98", 0xa9, 0x7, 0x0, 0x1, r3}]) (async) 03:31:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) getrlimit(0x1, &(0x7f0000000040)) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x2) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x8080ffffff80) (rerun: 32) 03:31:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x80000001, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7fff, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001c40)=@raw={0xb4, 0x0, {"5bae336b79d1e8a0a0a3f7a09433839742686ff44f81b19e1d695f0ab2e4fe2060cd98f6f9b57aa892ce294e42da1f9d260a9b8485df0eed25d94b84d49d538571094bf144c5f71d8805172754c37f32307ff9c45dfffea45b74a3ea755a4fae72820d1de3c42f3a26f55a878cdec9a8840bf0c56f40be9e9cdb191f85162fb46417912fd00d9c6b44fa3c63df15c0443b78daf148ac79ecc182387ad141e99ae64e8b7a249f64f06c4c8dcb2e4c09abbc"}}, 0x282) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x8, &(0x7f0000001c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001500)="b47c915d49d6470099a8c3d5e6e8da4831b2fb39d7428d3fb4bee93095578c9a2ac238b4e7d8ab54b0e88f70f50b04a0f383bafa4ef0b64b8ef49f042d20d5bcf8184a0588690b5cd4d1ecc7439a0cf35ee604fcb198090b928565914949364478d9f0b0113779292883d43a9b2c30ed7e87d372e3a91826f76fdca31c1c528feef506c0", 0x84, 0x2, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xa009, r2, &(0x7f00000015c0)="0a8f542d603d2a2732b2eea3ed5e0b14f064a0ae964d201b7fe8a9edc8ae3456e3305bf48badc20a997140588a1a63a8e7f770136c736ec7947d0001439ae4bbbd93f714679a6a32f7c4f3575251c93a1ca6234501313a2e2634d93c31f67f0f917408e52e6011ae9afb7529c5efb8a53c2bb5683356ba40736b47522e9176927c60483ff5218577fc9ab8e58c", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffe1, r0, &(0x7f0000001680)="27df30147319eb2987228955ff353f9e04cc9d9f0b7e474526e9d4e8e9873ef2012c946a397a1fd43a975b8196d30b534b7cee029840ea940f3d190a5dae4b8b1cadebab484afc56291d7ab38745e7b5877976a1b6e75853469740e7b5b7655ab477d548bff99abf31fa9ec76cab88a5d24aeb80d2b1382a8ae0adc914c95cb5b5954854c5553a239e2ae87a0dc5ec00611e2d9f73b537381afa5e575afea7e15d889e8b709b7e34e2f028ff619033495aefd47cfcdf938b8d441881c9b452ab91aad9605a24a7c23802165dac0c8ec9762c3ed8e3e8f84c540997d397", 0xdd, 0xd6b3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001780)="c56f8acc2782b0b8bb0fc931088cefabbe7d379331d7c7c0856825f0ca7ba5444f4e25f5e992c03ca4399f1d011f011eee72f1494ed6fd81327d142cc7987e607e486b155edd025494e28921d887170abb6fe6c5b44431bfe5e4772c43a8a44d266aefffdb7ee85344d303abe2348c47a84162d498df048689129af73dd7f62110b72445e9bac8fdb24e3f1d9a", 0x8d, 0x2, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x9, 0x5, r2, &(0x7f0000001840)="6c278393d31459a0a0eec12f", 0xc, 0x5e, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f00000018c0)="6dec806d62feea561f8a5e9a1d21d60a91fa91ba8be9b7f3abf549de9159b3b1c2", 0x21, 0x5, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x900, r5, &(0x7f00000019c0)="a88e73369f33bd07d6d5901b8aab0240a837fda4b2e257ad1441b775284bec27ba47476590f7a60f9a74f56741779f9181db1ffd8012", 0x36, 0x0, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="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", 0xfd, 0x4}]) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x80000001, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7fff, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001c40)=@raw={0xb4, 0x0, {"5bae336b79d1e8a0a0a3f7a09433839742686ff44f81b19e1d695f0ab2e4fe2060cd98f6f9b57aa892ce294e42da1f9d260a9b8485df0eed25d94b84d49d538571094bf144c5f71d8805172754c37f32307ff9c45dfffea45b74a3ea755a4fae72820d1de3c42f3a26f55a878cdec9a8840bf0c56f40be9e9cdb191f85162fb46417912fd00d9c6b44fa3c63df15c0443b78daf148ac79ecc182387ad141e99ae64e8b7a249f64f06c4c8dcb2e4c09abbc"}}, 0x282) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) io_submit(0x0, 0x8, &(0x7f0000001c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001500)="b47c915d49d6470099a8c3d5e6e8da4831b2fb39d7428d3fb4bee93095578c9a2ac238b4e7d8ab54b0e88f70f50b04a0f383bafa4ef0b64b8ef49f042d20d5bcf8184a0588690b5cd4d1ecc7439a0cf35ee604fcb198090b928565914949364478d9f0b0113779292883d43a9b2c30ed7e87d372e3a91826f76fdca31c1c528feef506c0", 0x84, 0x2, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xa009, r2, &(0x7f00000015c0)="0a8f542d603d2a2732b2eea3ed5e0b14f064a0ae964d201b7fe8a9edc8ae3456e3305bf48badc20a997140588a1a63a8e7f770136c736ec7947d0001439ae4bbbd93f714679a6a32f7c4f3575251c93a1ca6234501313a2e2634d93c31f67f0f917408e52e6011ae9afb7529c5efb8a53c2bb5683356ba40736b47522e9176927c60483ff5218577fc9ab8e58c", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffe1, r0, &(0x7f0000001680)="27df30147319eb2987228955ff353f9e04cc9d9f0b7e474526e9d4e8e9873ef2012c946a397a1fd43a975b8196d30b534b7cee029840ea940f3d190a5dae4b8b1cadebab484afc56291d7ab38745e7b5877976a1b6e75853469740e7b5b7655ab477d548bff99abf31fa9ec76cab88a5d24aeb80d2b1382a8ae0adc914c95cb5b5954854c5553a239e2ae87a0dc5ec00611e2d9f73b537381afa5e575afea7e15d889e8b709b7e34e2f028ff619033495aefd47cfcdf938b8d441881c9b452ab91aad9605a24a7c23802165dac0c8ec9762c3ed8e3e8f84c540997d397", 0xdd, 0xd6b3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001780)="c56f8acc2782b0b8bb0fc931088cefabbe7d379331d7c7c0856825f0ca7ba5444f4e25f5e992c03ca4399f1d011f011eee72f1494ed6fd81327d142cc7987e607e486b155edd025494e28921d887170abb6fe6c5b44431bfe5e4772c43a8a44d266aefffdb7ee85344d303abe2348c47a84162d498df048689129af73dd7f62110b72445e9bac8fdb24e3f1d9a", 0x8d, 0x2, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x9, 0x5, r2, &(0x7f0000001840)="6c278393d31459a0a0eec12f", 0xc, 0x5e, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f00000018c0)="6dec806d62feea561f8a5e9a1d21d60a91fa91ba8be9b7f3abf549de9159b3b1c2", 0x21, 0x5, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x900, r5, &(0x7f00000019c0)="a88e73369f33bd07d6d5901b8aab0240a837fda4b2e257ad1441b775284bec27ba47476590f7a60f9a74f56741779f9181db1ffd8012", 0x36, 0x0, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="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", 0xfd, 0x4}]) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3037.498195][ C1] sd 0:0:1:0: tag#482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3037.507993][ C1] sd 0:0:1:0: tag#482 CDB: opcode=0xe5 (vendor) [ 3037.514291][ C1] sd 0:0:1:0: tag#482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3037.523251][ C1] sd 0:0:1:0: tag#482 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3037.532210][ C1] sd 0:0:1:0: tag#482 CDB[20]: ba [ 3037.839097][ C0] sd 0:0:1:0: tag#483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3037.848885][ C0] sd 0:0:1:0: tag#483 CDB: opcode=0xe5 (vendor) [ 3037.855177][ C0] sd 0:0:1:0: tag#483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3037.864136][ C0] sd 0:0:1:0: tag#483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3037.873089][ C0] sd 0:0:1:0: tag#483 CDB[20]: ba 03:31:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1, 0xffffffff}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x5c, 0x32, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) [ 3037.940201][ C0] sd 0:0:1:0: tag#484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3037.949981][ C0] sd 0:0:1:0: tag#484 CDB: opcode=0xe5 (vendor) [ 3037.956244][ C0] sd 0:0:1:0: tag#484 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3037.965192][ C0] sd 0:0:1:0: tag#484 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3037.974147][ C0] sd 0:0:1:0: tag#484 CDB[20]: ba [ 3038.632414][ C0] sd 0:0:1:0: tag#473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3038.642185][ C0] sd 0:0:1:0: tag#473 CDB: opcode=0xe5 (vendor) [ 3038.648439][ C0] sd 0:0:1:0: tag#473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3038.657408][ C0] sd 0:0:1:0: tag#473 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3038.666375][ C0] sd 0:0:1:0: tag#473 CDB[20]: ba 03:31:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1, 0xffffffff}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x5c, 0x32, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) 03:31:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async, rerun: 32) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x100) (async, rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 32) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (rerun: 64) 03:31:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x80000001, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7fff, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001c40)=@raw={0xb4, 0x0, {"5bae336b79d1e8a0a0a3f7a09433839742686ff44f81b19e1d695f0ab2e4fe2060cd98f6f9b57aa892ce294e42da1f9d260a9b8485df0eed25d94b84d49d538571094bf144c5f71d8805172754c37f32307ff9c45dfffea45b74a3ea755a4fae72820d1de3c42f3a26f55a878cdec9a8840bf0c56f40be9e9cdb191f85162fb46417912fd00d9c6b44fa3c63df15c0443b78daf148ac79ecc182387ad141e99ae64e8b7a249f64f06c4c8dcb2e4c09abbc"}}, 0x282) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x8, &(0x7f0000001c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001500)="b47c915d49d6470099a8c3d5e6e8da4831b2fb39d7428d3fb4bee93095578c9a2ac238b4e7d8ab54b0e88f70f50b04a0f383bafa4ef0b64b8ef49f042d20d5bcf8184a0588690b5cd4d1ecc7439a0cf35ee604fcb198090b928565914949364478d9f0b0113779292883d43a9b2c30ed7e87d372e3a91826f76fdca31c1c528feef506c0", 0x84, 0x2, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xa009, r2, &(0x7f00000015c0)="0a8f542d603d2a2732b2eea3ed5e0b14f064a0ae964d201b7fe8a9edc8ae3456e3305bf48badc20a997140588a1a63a8e7f770136c736ec7947d0001439ae4bbbd93f714679a6a32f7c4f3575251c93a1ca6234501313a2e2634d93c31f67f0f917408e52e6011ae9afb7529c5efb8a53c2bb5683356ba40736b47522e9176927c60483ff5218577fc9ab8e58c", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffe1, r0, &(0x7f0000001680)="27df30147319eb2987228955ff353f9e04cc9d9f0b7e474526e9d4e8e9873ef2012c946a397a1fd43a975b8196d30b534b7cee029840ea940f3d190a5dae4b8b1cadebab484afc56291d7ab38745e7b5877976a1b6e75853469740e7b5b7655ab477d548bff99abf31fa9ec76cab88a5d24aeb80d2b1382a8ae0adc914c95cb5b5954854c5553a239e2ae87a0dc5ec00611e2d9f73b537381afa5e575afea7e15d889e8b709b7e34e2f028ff619033495aefd47cfcdf938b8d441881c9b452ab91aad9605a24a7c23802165dac0c8ec9762c3ed8e3e8f84c540997d397", 0xdd, 0xd6b3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001780)="c56f8acc2782b0b8bb0fc931088cefabbe7d379331d7c7c0856825f0ca7ba5444f4e25f5e992c03ca4399f1d011f011eee72f1494ed6fd81327d142cc7987e607e486b155edd025494e28921d887170abb6fe6c5b44431bfe5e4772c43a8a44d266aefffdb7ee85344d303abe2348c47a84162d498df048689129af73dd7f62110b72445e9bac8fdb24e3f1d9a", 0x8d, 0x2, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x9, 0x5, r2, &(0x7f0000001840)="6c278393d31459a0a0eec12f", 0xc, 0x5e, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f00000018c0)="6dec806d62feea561f8a5e9a1d21d60a91fa91ba8be9b7f3abf549de9159b3b1c2", 0x21, 0x5, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x900, r5, &(0x7f00000019c0)="a88e73369f33bd07d6d5901b8aab0240a837fda4b2e257ad1441b775284bec27ba47476590f7a60f9a74f56741779f9181db1ffd8012", 0x36, 0x0, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="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", 0xfd, 0x4}]) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x80000001, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7fff, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00'], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001c40)=@raw={0xb4, 0x0, {"5bae336b79d1e8a0a0a3f7a09433839742686ff44f81b19e1d695f0ab2e4fe2060cd98f6f9b57aa892ce294e42da1f9d260a9b8485df0eed25d94b84d49d538571094bf144c5f71d8805172754c37f32307ff9c45dfffea45b74a3ea755a4fae72820d1de3c42f3a26f55a878cdec9a8840bf0c56f40be9e9cdb191f85162fb46417912fd00d9c6b44fa3c63df15c0443b78daf148ac79ecc182387ad141e99ae64e8b7a249f64f06c4c8dcb2e4c09abbc"}}, 0x282) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) io_submit(0x0, 0x8, &(0x7f0000001c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001500)="b47c915d49d6470099a8c3d5e6e8da4831b2fb39d7428d3fb4bee93095578c9a2ac238b4e7d8ab54b0e88f70f50b04a0f383bafa4ef0b64b8ef49f042d20d5bcf8184a0588690b5cd4d1ecc7439a0cf35ee604fcb198090b928565914949364478d9f0b0113779292883d43a9b2c30ed7e87d372e3a91826f76fdca31c1c528feef506c0", 0x84, 0x2, 0x0, 0x0, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xa009, r2, &(0x7f00000015c0)="0a8f542d603d2a2732b2eea3ed5e0b14f064a0ae964d201b7fe8a9edc8ae3456e3305bf48badc20a997140588a1a63a8e7f770136c736ec7947d0001439ae4bbbd93f714679a6a32f7c4f3575251c93a1ca6234501313a2e2634d93c31f67f0f917408e52e6011ae9afb7529c5efb8a53c2bb5683356ba40736b47522e9176927c60483ff5218577fc9ab8e58c", 0x8d, 0x7, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xffe1, r0, &(0x7f0000001680)="27df30147319eb2987228955ff353f9e04cc9d9f0b7e474526e9d4e8e9873ef2012c946a397a1fd43a975b8196d30b534b7cee029840ea940f3d190a5dae4b8b1cadebab484afc56291d7ab38745e7b5877976a1b6e75853469740e7b5b7655ab477d548bff99abf31fa9ec76cab88a5d24aeb80d2b1382a8ae0adc914c95cb5b5954854c5553a239e2ae87a0dc5ec00611e2d9f73b537381afa5e575afea7e15d889e8b709b7e34e2f028ff619033495aefd47cfcdf938b8d441881c9b452ab91aad9605a24a7c23802165dac0c8ec9762c3ed8e3e8f84c540997d397", 0xdd, 0xd6b3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001780)="c56f8acc2782b0b8bb0fc931088cefabbe7d379331d7c7c0856825f0ca7ba5444f4e25f5e992c03ca4399f1d011f011eee72f1494ed6fd81327d142cc7987e607e486b155edd025494e28921d887170abb6fe6c5b44431bfe5e4772c43a8a44d266aefffdb7ee85344d303abe2348c47a84162d498df048689129af73dd7f62110b72445e9bac8fdb24e3f1d9a", 0x8d, 0x2, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x9, 0x5, r2, &(0x7f0000001840)="6c278393d31459a0a0eec12f", 0xc, 0x5e, 0x0, 0x2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f00000018c0)="6dec806d62feea561f8a5e9a1d21d60a91fa91ba8be9b7f3abf549de9159b3b1c2", 0x21, 0x5, 0x0, 0x1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0x900, r5, &(0x7f00000019c0)="a88e73369f33bd07d6d5901b8aab0240a837fda4b2e257ad1441b775284bec27ba47476590f7a60f9a74f56741779f9181db1ffd8012", 0x36, 0x0, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001ac0)="79c0d8f8a82f5b25f43000d40c5d2c3df24ef4b63b27a8b4feb559f8ec5a30e6e320554066714818692d2d63f6cd1e36a562874ed8de9a3c474dabd0234dd9d70f1b283173ce30af186896fd8c8f25409064db4ae5294a5670fa6b37c287fbacdc803c711d8b4a4117fd38a38ae9b9a82d1948b5831f18ca83a9585e2de1acb954669b2a385e256b052c131152de722f8b2c6888e6d0f678aeb5eb660675ba05851aaa9628179c69d6d21556933f7edcac0e048d12039b20086542a502b0480f4b3226656bec31e61428b6c8280103885ff6f2c84d6b8f1c795e85afef287a4cbf6f90ce9497d30e28c7a348ec5ab362855bec77af53ede5946b060139", 0xfd, 0x4}]) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1cd}, 0x6044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x9, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x7, 0x200, 0x7fff, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x400, 0x4, 0x1000, 0x74, 0x11, @usage=0x1, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35a, 0x6, 0x2, 0x81, 0x59, @struct={0xffc, 0x4}, 0x8, 0x5, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) write(r1, &(0x7f0000001440)="e5bfed76e5a2d04982c94843fa3a6f5e1bb2a17781be689f768ba48f21a65f5abfe600d8f99f775e1a280aa635d8bd6d074933d8ac81943504af9fe8016e1af33fe1a43ac590f8f14c1eb2bd92fad44f92c019f6b96832b6d511dbcb8e36fa6261b99ff2ed1de379c64b3e8e6d8bea4a80f97a911f994efd366f6411c8ea55dbc9317699c1b693c718d9c3d0e15f95fc5825c6b4437cf07db02d5c7222ba3055", 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) io_submit(0x0, 0x6, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000300)="26cddb89d796034df76c3055300ae403ba1a077cab794226ccd119c42ffb8aeb41edd5ec6d65cde56b95465a5c8f32d983e9d2a74390bd5a5ffb1d76d45540122a322e925f3de4a713acdbadd6349865e5d8ed75ccaecac7f9", 0x59, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x59, r6, &(0x7f0000001500)="ef99db97bff05e33cdd24186db1aa992b1cc4cb9527343e9c8f81faab9dea68750416228ce5d6d903c8bfb08e1d96e58a38c6ba2c53c30349c1ff06750e9baf5b2efd3f3df1e8a0d1be77bec5caa310d39eb1420b12be1262c302b21418e330e4ea7cb", 0x63, 0xffffffffffffff7f}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001600)="cb1d4fcc43e9783156602d6bd9d215de20e9bcf521ceb4f7c11bb83915da38e738aaad269020ccb3ee24ed31de021bd8cb12414fcdd77d51d3318307d3aca6cc6359e28cbdfd553f68e13d93090b7e44b3f3d0fb6e56fa15aedc1e93b1d14a4faf86e780b279ef27fa7423eacb7cec125ee5efa67ee066337d640c7dd0e0f867b3a1f1da5d8e1039b2e7fa0569a690ae8d244d813f326181bd02122ceb371313ea9a83e04ce0395374ed102b2336604a9ba2f365120bbe2178d618fbc3d21a53c90988ace2d0d24dba2a5c197aa7d2c66d5524c22dd33912572090f2ee168507eb7204ccd0", 0xe5, 0x3, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001980)="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", 0x1000, 0x6}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001780)="d3e48ee7b0af65ee4510ebca81c4d7501f4d28278114e69ceecdba4f9d730c0e59525fe3f2c11071bde5d84768a37fce0527fe00dd83501be122509019a58ab4aef1bb678da29a71a3ca42bfa0a9357f006926ba383f90f73cbdbf1026302cfd61e3660c9b1ca5fbbfa3221bdbfc577aaf6f7000bca31a997c33bf39fb411f0e49a2ad2643c1b8227fae250976810e1ab36294dcf988d0d96d5332b3e825a618e9269ebb64", 0xa5, 0x100000000, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000002980)="2ec506f1851ea65ae3e968d74eb5273a62ad4479aa1654386564efcd8edf6a15c7b6e45797080826b4720349e014bb930b59e78a0b9753571b1426355aaa8f80bf13d00fd96cbe4bd8cacf260ba214d475c23e57bba32af4d873d89e247dacba200452e3aa0ec5bd6cd3db6c0e67139b78d28ea47a34ceda08988fe63737c6668922db000dff2c7ffc41addb770edc7495423817bd5854598b923b25dd3357d179511d6069e782bd98", 0xa9, 0x7, 0x0, 0x1, r3}]) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1cd}, 0x6044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x9, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x7, 0x200, 0x7fff, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x400, 0x4, 0x1000, 0x74, 0x11, @usage=0x1, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35a, 0x6, 0x2, 0x81, 0x59, @struct={0xffc, 0x4}, 0x8, 0x5, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) write(r1, &(0x7f0000001440)="e5bfed76e5a2d04982c94843fa3a6f5e1bb2a17781be689f768ba48f21a65f5abfe600d8f99f775e1a280aa635d8bd6d074933d8ac81943504af9fe8016e1af33fe1a43ac590f8f14c1eb2bd92fad44f92c019f6b96832b6d511dbcb8e36fa6261b99ff2ed1de379c64b3e8e6d8bea4a80f97a911f994efd366f6411c8ea55dbc9317699c1b693c718d9c3d0e15f95fc5825c6b4437cf07db02d5c7222ba3055", 0xa0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) io_submit(0x0, 0x6, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000300)="26cddb89d796034df76c3055300ae403ba1a077cab794226ccd119c42ffb8aeb41edd5ec6d65cde56b95465a5c8f32d983e9d2a74390bd5a5ffb1d76d45540122a322e925f3de4a713acdbadd6349865e5d8ed75ccaecac7f9", 0x59, 0x80000000, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x59, r6, &(0x7f0000001500)="ef99db97bff05e33cdd24186db1aa992b1cc4cb9527343e9c8f81faab9dea68750416228ce5d6d903c8bfb08e1d96e58a38c6ba2c53c30349c1ff06750e9baf5b2efd3f3df1e8a0d1be77bec5caa310d39eb1420b12be1262c302b21418e330e4ea7cb", 0x63, 0xffffffffffffff7f}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001600)="cb1d4fcc43e9783156602d6bd9d215de20e9bcf521ceb4f7c11bb83915da38e738aaad269020ccb3ee24ed31de021bd8cb12414fcdd77d51d3318307d3aca6cc6359e28cbdfd553f68e13d93090b7e44b3f3d0fb6e56fa15aedc1e93b1d14a4faf86e780b279ef27fa7423eacb7cec125ee5efa67ee066337d640c7dd0e0f867b3a1f1da5d8e1039b2e7fa0569a690ae8d244d813f326181bd02122ceb371313ea9a83e04ce0395374ed102b2336604a9ba2f365120bbe2178d618fbc3d21a53c90988ace2d0d24dba2a5c197aa7d2c66d5524c22dd33912572090f2ee168507eb7204ccd0", 0xe5, 0x3, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001980)="d1607465ba58040b55bbf48d50bbe865b7c1e23979b8a1cbe8d63a6e67024884c984b90b78f459e0735a3ca49e59e903a2da8c3165c63e81cbff9a6417b38085745985c7af6636bdc76aa00fcc3c2023252c783afdd0c9e39b3e2b13711b80a0acafae04db68e84a0f583049d17df32b49030e133fb66737b3c0609d52c6afbf68aeb2cf2364e4158c65a68a37c23a00fa5873cac66696f087f89901da0df4675aff2a58e52f1bbd52a8d7799397cb9f1663a613978965855294d0c6d544cb6c7746be67923d185e2aebbc2dade016e8d58e798c8c869b0a59eb0ec13fe691fa540e322d09ef221c75f7ec1832e2dc36f969769162fc34a1085833359bafa38c9094d3eff430733541c7e99e7fd5fe908dbd759517e5392a3785e716cedfeef7b45f8c7decef54b07ba3e34f26f62c10f676c70d4b88ba79f48ecaac9c09ad8fe20ea72e5df9025b2575c37f3034034dc95dd1b71e0f93a196997f7e2fb5f91645f4e070fc198802f97677124c1cc9a730cc7c62f3ff55192812740815e3bf43f921805fe7703a6e0a5f672d01aca93b7c6604f23705a1771e98e4eb3e2b92366f50528878a38529a15943e9b161f57419d4ef51525a530689cf94e9d77887711df7c9d990fb96e356328c38797636a6c90656f71979371dc8d07c6bbbd22e972708effb498f98c7f590fe21abda697246354886a1f7ff4d3fac5736b3d4d541480428980a38143064db7386ffa438506f616720a91f8d8cb0e899af0bd5fac0be60f787ed38752c184d0bee0141e3bbc7b9991e327828bfa18af4ecbd044c0a1be5138711b7f5f3bcc2d9919433e7528fde24b918851ee2c8d898ee4cb288d5ad3ec38b0f231ae85d8b26d039171ab0d7282d59299de470d833e4de1595a1932ce9d8f4564cdfc97464b61262fee7621d8552e62525f1056da4c47ee182321d94022eb3586dc268e2bea7b0275e4eb862e88b4f5841862168cd6db4043201a123c7d9caba3aa4635eba196567caa4d0752b0a0890f83349a3b7d0dffe28369f557cd57a5bfe8ec4836e5bb32df5d328f09ad2b662df7f20c08f91d92e9f41c472718e2db6bdb552f51725ebce7e73eba4ee18bf2270be67c435a148cacb10b0962dc8f95ec27eb7786c15478f22bdd04e37ed840d8842ce17270e4ad4923b38c9f9e7a30e54959eb78da226ce993a4574917675844659fe4ceff8754038c078e763ce19e98bba5fa9b17617c34a43159222d4da71494d526e44a1f5b0280ece0f64a519497d4e6014bc830bd541a59709f3f6237d11c6d3573e11531b0f8eca71c5b4afe02780177b3024f4b3e4cffc7b66ba4dc3ec0f5902623cd765207494ac43598768e1438097dfe0b9d0ced9326da029ccc90f54cd75d2c32f49270e9df2f58af178ca673da90be4d18ca864b3055a6f0d7ffd76ac5d675999dec02c427942234b59e70921790378433b24135b9961c2e18809c33e228900fc6355f091e26dc8a9bbb8531499506d1bbf0171dab6ed25e27296e04688f4d7d11abdb9e4d83e333613a64f385f1648ba253e05826e1180889a0ea1d54a0fc456fba4da834a9c2981ae9876bed9bf75f71979882fd94e84773876186a47436182edbe0b017689aac112e77566a07932a33693e3d588a983d892723df0eb08a9400f214bc07d1d7a08db7204829631cfa68603611ea8957fcc34fe0a49ef131e71a73cb97d3a3ef2c970ded56ce4283376ef80d14cbcda9c82254d521cb37cbef54e7261061b45948019a9d9c8322ce5252d30892b2244dcb0176ad0d5e26e8ac553bec6f9b5340dc77b4165596b051781f82d788f2a05927c8de00972eee6b87d753dc53722722c7d1c2c6d22f83bef68c7072665bced7559a1ee02f7cb69306c44f5a0c7578b6780e1015a63b4e4a805c7ede6a97fabf5951693c60fc8f1f0775a670277f3fc3f3646506196ec6ffa93d56f907f72625c4bf16cff3af37a0740c22a291f5da248e239b62e91d75d8bf0a4aa8e5a39630db84a55b58d8dafc4073572ccadcf6f4d922c2710f47e8e2f77d94a67c051f493ff4e347050728ea610de467c488177ae6858ef5eb4fb662be2bcea524ba00f196313be3043b1851ee39efd4fe1b162f3e50074ae66d936879336f3096bfa12681291df7d3107437f0134bcfafaf1d7f4bcd898814b0506623da923bb415f6f81d1b48a9a68bba8dc7da16dc124d2848dfb5dd160a152ce9f894b4f6f32d74c3ff68d70fae2f4bb6a388fd5a5185b47dfee23082bac02b03bbc14a8a8a621c699e67e57adb8ca0e7d87c5f32f60eca2f74f7c20b5401340342c9b6dc29cd9b6dec740098e8320ec6c5ee8c60173ed3b0c17044481998b6096c7423404e00c8284ba781afcb786ae2ea5ae5e8f66996c9a215f998d14a4d669e9453bf43abe4ff8e8a0cdfc5b0442e42a1cb4cdb25c7b754197c4f34a10e885c08a6676559705efe7df715aa6f75ce918a0c7ebc9d54bd02b4a8925d0bde328547782d3d78b343a86573d64996f827796b582b38789751b438496621363d7e9060496daa39070a428bbe2e1715f2478097a62a0f6805239f2af89f77f91ef1ecbfe73b97efe6e06b249b0ee141d10c4edfbad568a786ccc59a066392c0edae198691801c85c38f8f658f4dd0e1a8c758e7bdba15eda2f8e1428e4b019bde18f76b43d825a657f1e852f8692a326cbbeaa6961a5e50f0533faf3ad2b86bf105433650f2cbe606394ad05063c4d03bbcddabce2fb5c6c740265bbd37db19b2eb4f59295080f128e01b1b425a95506954ec35048b2e837fd863e380264e8cbfed6ba9aac344015b8c767ae97ffe6c4172848eab486d3f7dfe8289e0e033103834d8ec32f21242ce2031a800017b37f81eb5ec7432fa346d8c766ad6832e3279efa51e11c43057b1c746978f5e7d4a109e8c74d80df5c1b3fd9fd181996ddd88b0734f3ccae400599b64db0dfcda804afd3bdc94d546be0f2540627f717c84ba4a3fbe10519509de17e5e391d97416f8edb15556413f29f51f4d08fda40e3157cca1eb1361d01ce5c00429fc34c6cc19a5f31e3766254def27a7c569027e472c6540af9d8947d314efcc06bee8f20422949e4090a2788054051b7b631b23efd3e77e28265891d22055a80bc698b47c019b579e9c2f5f5b109dd7ed26965bc963ac1ea3112e48c9e15c5c648c68585d5375cbf819b1f217b21d0cbac2f318a475bdf6b7dee9492557c9a61439bc589e03228fcec5395ba90c70463b40e15bb8ae96b309abb7eeef33fc16833aac336260cc91605aece9f81f15e0c2e6b3ff7bc27c9732ec3d676620a27b86e72c08e3ac1a4a8fbdf95838bd6c501d6d6b08b8c2d044a409d24dfa01a78ac448b91864ac23b587e958ca2c5b82503f49b30fb195894dfac2f08a3624379afb3714b9f088d864581512c9d54084eafcc9642dd5ce0665da49df461c3e5a5c42c45a444f536b34fb74f630ceafda89c27a41a9efb23c2b2fc0ad284c0fd36aaac9340cccb72ccf2bd24c3634cb11983656d8349294f8f6ab76b1d5b74cf8e0d04640d8c8854e42a4bd7f8f391d10fb974744d44952a6bc2cead5980840fced6d1e87c344515359b4d784b000758e15634c04d60b79428bb91f562a8499278b8885e631b50d8acbb784ca4b5ec797df96a98928e35fcc764c33aefe35848580ca32d52040fe570b427b496cd564a33c5c771a3c411875067d71d04c2668ff14501ed892f0c778ccb8e70406bb867802615766fb92545131c75c19a07be39229ef8db70d2040120e1608b8c23e23b4091c9494e242a10c17a12309231370a55ff8f9a3e478c2f9d2faaf908d45418ecccbc430defe999319554d19f01ee685be1b9bfe6892dd63917170ffd72d5b5cec684ec77554996917e29da2692c04df4b946b1da44e3898172e11ac0fc4eee4ce59d2b498052dc5fde03df5429428d927aa70495906ede0e74cdf6355fc0d6c7840784277972bcf7b801d7966d0661d99ec0c0080d7a6d0e117e87ea13b126104a22ee1bfa5612c3dece5dd842cbb140c6c0f01d68c691bb48ffe25b6a042913043bd5b79a5fee50eda2bb47eb4af0ab76618dfa83f63a843dba6dd895896af2a65417a9131977a726870c5e34aa79cfb4d0d8ad95c5ef5c19cb43611bf91c45510a38d22dface744fa53602ee2d09f4af038ad888e6ceb8bd59a8b31e08fc0b2bd53f25cb75907addcdcfd9a8efcdc430584dca58b124f1af2ae07365ba136c507ceabaffe2c2b6e6471fb35fb64f658137d08b7fe3cfdb13d055787a9a0efdc14f888e362549e7250fd67c83e1f3b2782a42703fb7062c172d67ec3e27ea29b91fc1a390b431910b7f9f7bf65cf78073184851f2ec3fafb4ddc53ae21f20e53e0c4309325d09d7c67c9be25ee33f3415af307ba34f3b3d0fb5c6506a14db6ab53a0d35b392315389f65963e07ad3ffe5ecb809fdb0948a9e66edbc4e442b46e036aeeeb2171ef516321d15212702237b04b833faecc63320732bc24bae28733a4d6367e2918c531f53ba27ba635129e97e5d3ce1126a829b033b04583960cfbc21a74eea10363690db5d6a19adf9420d195f6f3242015c084e0e3b910f70f3d9a7c706f09dc5416771c4e8329edcb2652bedbdbf0102a41671d343969bf6e12eca85f5b690a54aed436287af84ef0e8c5b8ed01b65c279921e17abd09bcec06fbc383159d8e99b80e8cd69dba783cbe378064ad066ed48a91a7c1251ab2abd055f909d9a897dbed88f0357fa2f13d92befe688edbbde7bb9e13d98314d3024d141f9b1cd7fae1940ee0af092f8a65612b9cf9ea491a1a6207f2cb823b64258076913317cbaa74d8b75fc5bc3b01dca06a13fbb681f262f739d1d31c748384d466a1fb2890cafa4027d4c6d8efdeeee332a6acc2d744cd55302af252ce3775564bf36f89cd0635725574b274e48e5d630491c2a45249473f1feb3f2f484a09f9625c37289aaea28e315ac42e50bdf25c4b2555cccdffade0caad2e0e14fe42ebc9dfd1ab78d7552494d74c270a090a6e5b9a30edb854862a395f6808fab901be4cc815945abdfa04761f8bf9a9e60ff18bc8791e37ec999c5615b3223ef14d348cd32052d921dd390c8cedcc8a010acf4d6eb0f816a64908e2e077df1092cd429b47d1cad36a2038b8f5dc07a2400a84f14b23868d3abc547a8db49177d226076d35c5f52d523ac26c0fb22151a37b5714fba061dbc695b2a50b0de7ae3955bd64aaa711871f7ecac0f807b15067c4dfd76e5c302c449be5ac9cdb7826968a428415f1d5e5fc7d5cbac658fa0ffe25c421dc933a8315a02be1314996b7a8fc50ddf37ce42631aaba50e14d41af7a71ba44e58bd5e4fde0a9c0fd8f8f00d7f1972281937ed58321932c7d28c443378ceac19dadf2c211011558452ccfbd06f4cc78c078d1f11bbd93d0100102e89ed9d34433cb49b4708e7ee559c8acf0a923aa6e0c3772fa9bf310a8a4a8ed1ffa179fe358af10630363345630b6478bf823f777acba2a026b452d3f0b6b602e118b930b784988170b03422a23a2e5c48e56f6588460b10526f2cae1411b6f19a4905d97c1e2cc63f1eccc7a3d24ccd40d73c1501ed55909b7a42eb2da8ab0e8dbdc14bbdd2982cf7ecb1cde9a7b1c9452b4e8ff628b243b1de8aad65b960af29c07a5df8df03af0006e855f7658846e258e9c5564e45ed4f7ee577ba6fd74a894496664c9b9fee68938e48c240db1c5244ed86c301e2ca0ef4e188e97d66f5dffcb243dcf447ac392d861ce1ecff6f", 0x1000, 0x6}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000001780)="d3e48ee7b0af65ee4510ebca81c4d7501f4d28278114e69ceecdba4f9d730c0e59525fe3f2c11071bde5d84768a37fce0527fe00dd83501be122509019a58ab4aef1bb678da29a71a3ca42bfa0a9357f006926ba383f90f73cbdbf1026302cfd61e3660c9b1ca5fbbfa3221bdbfc577aaf6f7000bca31a997c33bf39fb411f0e49a2ad2643c1b8227fae250976810e1ab36294dcf988d0d96d5332b3e825a618e9269ebb64", 0xa5, 0x100000000, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000002980)="2ec506f1851ea65ae3e968d74eb5273a62ad4479aa1654386564efcd8edf6a15c7b6e45797080826b4720349e014bb930b59e78a0b9753571b1426355aaa8f80bf13d00fd96cbe4bd8cacf260ba214d475c23e57bba32af4d873d89e247dacba200452e3aa0ec5bd6cd3db6c0e67139b78d28ea47a34ceda08988fe63737c6668922db000dff2c7ffc41addb770edc7495423817bd5854598b923b25dd3357d179511d6069e782bd98", 0xa9, 0x7, 0x0, 0x1, r3}]) (async) 03:31:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1, 0xffffffff}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x5c, 0x32, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1, 0xffffffff}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r4, 0x0, r4) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x5c, 0x32, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) (async) [ 3040.606774][ C0] sd 0:0:1:0: tag#474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3040.616595][ C0] sd 0:0:1:0: tag#474 CDB: opcode=0xe5 (vendor) [ 3040.622901][ C0] sd 0:0:1:0: tag#474 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3040.631848][ C0] sd 0:0:1:0: tag#474 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3040.640798][ C0] sd 0:0:1:0: tag#474 CDB[20]: ba [ 3040.645892][ C0] sd 0:0:1:0: tag#475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3040.655624][ C0] sd 0:0:1:0: tag#475 CDB: opcode=0xe5 (vendor) [ 3040.661870][ C0] sd 0:0:1:0: tag#475 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3040.670843][ C0] sd 0:0:1:0: tag#475 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3040.679800][ C0] sd 0:0:1:0: tag#475 CDB[20]: ba [ 3040.790844][ C0] sd 0:0:1:0: tag#480 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3040.800635][ C0] sd 0:0:1:0: tag#480 CDB: opcode=0xe5 (vendor) [ 3040.806943][ C0] sd 0:0:1:0: tag#480 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3040.815898][ C0] sd 0:0:1:0: tag#480 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3040.824846][ C0] sd 0:0:1:0: tag#480 CDB[20]: ba 03:31:24 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x1ff}, &(0x7f0000000080)) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './bus\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2a4, 0xb, 0xa, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@nested={0x251, 0x63, 0x0, 0x1, [@typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @generic="993e997dfa22e7d9553ef54126fa577b544bd512d129254494894e45135a334e15faf0be80e32833e2004603fb35e9da07c69c5a3dd36cb07349cb930ee0e5a116ccdd400ff3af404f79b34f5b0e5e2f8d39b23bce69954eb139cb7b4487acf59dce7b1bc2bbdad795dfed0b872df29967c153", @generic="74dbc93ba0d12c982ed38a26ca0fa374b71767b17aa1db4ebb8e19ef2cf4bc4b15ba137bc8eb7833023cb70cd2e44b96c86b01ef27f7119a3aa509d23c4de3", @generic="aed9077cd7c952caae1d823cc51c5c07611314f523423a839227dcc348eaa759e345e955a88fced0ac9f3aac322bd1bc7eddf1bdfe9bda980e5a982f5cf9ba29554fd70089be40d1ce5b4503f17fb040206e6a2ad534a3b2c4dd3875ba5ffe094bfd595a8b79ce3154152f6c13e6df6ec6ecdd85acf4bade876fe000bb8bb8427a048aeea1e37e12e7f5d3e4ccd13d3df6f8d8", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @generic="ff8f16c3f009de0f139d48b3774561bd8a02a62a60ef03fc067fa8404a56abc98b63e67379acf940784ef6d0c2afb16f0fe0d5b103bf", @generic="60e6d9392d88344c9ef1ef2b5e85e50f78f9086878884c0e37cff3e0806ce4ab2dae081da6e2d3509210da3a9b100a98ae4480f05ef3", @generic="30b01f61ac900f7180600d7c3ebbbf18afe32a89070eab65df701d73451741ba089c873c6c206022ab512380154d6ef3290bf8f6dba51e0777e1e118897640117ab07246f006900aa054f1e7d8671f303bf16d1e198d6308ae24126a2a42464030e7f3a19b0fa43142df70bcac9a60ea1ae2f037554b6d1870b9e8b50ed5dc43"]}, @generic="67c17d43a595d66e1ca9c8616a5c532aacbc44fc6aa82592913d6282736453a9a2217d2d558d123ffe99f6566ab068b74b618e0670d78f5e0559cc7b"]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) [ 3040.902631][ C0] sd 0:0:1:0: tag#481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3040.912410][ C0] sd 0:0:1:0: tag#481 CDB: opcode=0xe5 (vendor) [ 3040.918663][ C0] sd 0:0:1:0: tag#481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3040.927615][ C0] sd 0:0:1:0: tag#481 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3040.936582][ C0] sd 0:0:1:0: tag#481 CDB[20]: ba 03:31:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x6, 0x5}) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001440)="45b82d2c09de99404a9dae331260a22fdbcd029ca0396f2ddf59698ad402ab589b42d8c7e47cb985fd29efc7c16ee8fdcc7f94ae561d4fc08df539050b7901c3f75f580e07435e63caf5a76593d38b91fd101ac1030793c64965a92cbf86f9e31757a53eb5e67030dc31ad13ad1ac69c90c1c3b054683b917dbf14cbc05364de1f8f90211de4b4067435eaf87deafd68661227db21ffe9984b2cfec4e44770d1c182a502", 0xa4, 0x5, 0x0, 0x3, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000300)="b8ed20e4f285da3c11f414db", 0xc, 0x6, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001540)="733904e5c1d535b1ec047788255419bc17cf4dadc2add3a73cb7b20b99ef12f0a6ab1805f005f23406b2a0fe647c200192ed958599174f7a6d343d9e09f24ab4ba36a2adf84f49e8e4912a1235db1edb6b6b17429c0d0c2f1916540aeedd9651b16691c5d4614d2d968bc177a3a41837e65a64ce99adfa9829b0031bebcddabe0cd47df7fc95e50f6888fd76f775c0c140fcfb04c8251b0d383df571559f355df34c94c2e5d9511c64d331e8bb676ab055ff6e3ffe6cef870ff7cdf05d13bd4d82c7b2318ffc5b6bdcd6cc2a", 0xcc, 0xfc, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="c77468e6bb05eab2513204f6aa20a7425d1fecfe12afa2974647a36e5ccd4043e90aaf741dff6225ebcc3346c8ca8c893747f83acb51457b844bce7de8a7a07dc71bd9d288c651e5891e0058f18f44a8b06e176fdddfe5d31396d0d90817cd5e131f4e8e9153f6fc84b4db820498de1d43605c28c6f806089f6d0f67e6e1744051", 0x81, 0x1, 0x0, 0x4, r3}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3041.239932][ C0] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3041.249728][ C0] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 3041.255998][ C0] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3041.264972][ C0] sd 0:0:1:0: tag#457 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3041.268814][ C1] sd 0:0:1:0: tag#458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3041.273920][ C0] sd 0:0:1:0: tag#457 CDB[20]: ba [ 3041.288662][ C1] sd 0:0:1:0: tag#458 CDB: opcode=0xe5 (vendor) [ 3041.294933][ C1] sd 0:0:1:0: tag#458 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3041.303891][ C1] sd 0:0:1:0: tag#458 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3041.312876][ C1] sd 0:0:1:0: tag#458 CDB[20]: ba 03:31:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './bus', [{0x20, '/dev/sg#\x00'}, {0x20, '!-'}, {}, {0x20, '\x00'}, {}], 0xa, "885a69ba40b3caf7dba4fbafbd166885b9d9ad758080b06e4c34731ddabee5812e453b225ec64328f33ccf8550e4166ea28dddc6c4800e6d80c1911fee9d89178ec570f3c1cd4bb8e1eb49e87ea19b850405f6949ec84174c38574692a85b6e82cbba19154f7768e3b5b"}, 0x84) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) r5 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0x16, 0x80000000, 0x20, "f8cf15f277dcc303cb214afb78cb9257f5e9053c687e"}) 03:31:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x1ff}, &(0x7f0000000080)) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './bus\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2a4, 0xb, 0xa, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@nested={0x251, 0x63, 0x0, 0x1, [@typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @generic="993e997dfa22e7d9553ef54126fa577b544bd512d129254494894e45135a334e15faf0be80e32833e2004603fb35e9da07c69c5a3dd36cb07349cb930ee0e5a116ccdd400ff3af404f79b34f5b0e5e2f8d39b23bce69954eb139cb7b4487acf59dce7b1bc2bbdad795dfed0b872df29967c153", @generic="74dbc93ba0d12c982ed38a26ca0fa374b71767b17aa1db4ebb8e19ef2cf4bc4b15ba137bc8eb7833023cb70cd2e44b96c86b01ef27f7119a3aa509d23c4de3", @generic="aed9077cd7c952caae1d823cc51c5c07611314f523423a839227dcc348eaa759e345e955a88fced0ac9f3aac322bd1bc7eddf1bdfe9bda980e5a982f5cf9ba29554fd70089be40d1ce5b4503f17fb040206e6a2ad534a3b2c4dd3875ba5ffe094bfd595a8b79ce3154152f6c13e6df6ec6ecdd85acf4bade876fe000bb8bb8427a048aeea1e37e12e7f5d3e4ccd13d3df6f8d8", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @generic="ff8f16c3f009de0f139d48b3774561bd8a02a62a60ef03fc067fa8404a56abc98b63e67379acf940784ef6d0c2afb16f0fe0d5b103bf", @generic="60e6d9392d88344c9ef1ef2b5e85e50f78f9086878884c0e37cff3e0806ce4ab2dae081da6e2d3509210da3a9b100a98ae4480f05ef3", @generic="30b01f61ac900f7180600d7c3ebbbf18afe32a89070eab65df701d73451741ba089c873c6c206022ab512380154d6ef3290bf8f6dba51e0777e1e118897640117ab07246f006900aa054f1e7d8671f303bf16d1e198d6308ae24126a2a42464030e7f3a19b0fa43142df70bcac9a60ea1ae2f037554b6d1870b9e8b50ed5dc43"]}, @generic="67c17d43a595d66e1ca9c8616a5c532aacbc44fc6aa82592913d6282736453a9a2217d2d558d123ffe99f6566ab068b74b618e0670d78f5e0559cc7b"]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) gettid() (async) prlimit64(r0, 0x3, &(0x7f0000000040)={0x1ff}, &(0x7f0000000080)) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './bus\x00'}) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) (async) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2a4, 0xb, 0xa, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@nested={0x251, 0x63, 0x0, 0x1, [@typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @generic="993e997dfa22e7d9553ef54126fa577b544bd512d129254494894e45135a334e15faf0be80e32833e2004603fb35e9da07c69c5a3dd36cb07349cb930ee0e5a116ccdd400ff3af404f79b34f5b0e5e2f8d39b23bce69954eb139cb7b4487acf59dce7b1bc2bbdad795dfed0b872df29967c153", @generic="74dbc93ba0d12c982ed38a26ca0fa374b71767b17aa1db4ebb8e19ef2cf4bc4b15ba137bc8eb7833023cb70cd2e44b96c86b01ef27f7119a3aa509d23c4de3", @generic="aed9077cd7c952caae1d823cc51c5c07611314f523423a839227dcc348eaa759e345e955a88fced0ac9f3aac322bd1bc7eddf1bdfe9bda980e5a982f5cf9ba29554fd70089be40d1ce5b4503f17fb040206e6a2ad534a3b2c4dd3875ba5ffe094bfd595a8b79ce3154152f6c13e6df6ec6ecdd85acf4bade876fe000bb8bb8427a048aeea1e37e12e7f5d3e4ccd13d3df6f8d8", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @generic="ff8f16c3f009de0f139d48b3774561bd8a02a62a60ef03fc067fa8404a56abc98b63e67379acf940784ef6d0c2afb16f0fe0d5b103bf", @generic="60e6d9392d88344c9ef1ef2b5e85e50f78f9086878884c0e37cff3e0806ce4ab2dae081da6e2d3509210da3a9b100a98ae4480f05ef3", @generic="30b01f61ac900f7180600d7c3ebbbf18afe32a89070eab65df701d73451741ba089c873c6c206022ab512380154d6ef3290bf8f6dba51e0777e1e118897640117ab07246f006900aa054f1e7d8671f303bf16d1e198d6308ae24126a2a42464030e7f3a19b0fa43142df70bcac9a60ea1ae2f037554b6d1870b9e8b50ed5dc43"]}, @generic="67c17d43a595d66e1ca9c8616a5c532aacbc44fc6aa82592913d6282736453a9a2217d2d558d123ffe99f6566ab068b74b618e0670d78f5e0559cc7b"]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x8080ffffff80) (async) [ 3043.325340][ C1] sd 0:0:1:0: tag#460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3043.335124][ C1] sd 0:0:1:0: tag#460 CDB: opcode=0xe5 (vendor) [ 3043.341379][ C1] sd 0:0:1:0: tag#460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3043.350470][ C1] sd 0:0:1:0: tag#460 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3043.359419][ C1] sd 0:0:1:0: tag#460 CDB[20]: ba 03:31:27 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x1ff}, &(0x7f0000000080)) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './bus\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2a4, 0xb, 0xa, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@nested={0x251, 0x63, 0x0, 0x1, [@typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @generic="993e997dfa22e7d9553ef54126fa577b544bd512d129254494894e45135a334e15faf0be80e32833e2004603fb35e9da07c69c5a3dd36cb07349cb930ee0e5a116ccdd400ff3af404f79b34f5b0e5e2f8d39b23bce69954eb139cb7b4487acf59dce7b1bc2bbdad795dfed0b872df29967c153", @generic="74dbc93ba0d12c982ed38a26ca0fa374b71767b17aa1db4ebb8e19ef2cf4bc4b15ba137bc8eb7833023cb70cd2e44b96c86b01ef27f7119a3aa509d23c4de3", @generic="aed9077cd7c952caae1d823cc51c5c07611314f523423a839227dcc348eaa759e345e955a88fced0ac9f3aac322bd1bc7eddf1bdfe9bda980e5a982f5cf9ba29554fd70089be40d1ce5b4503f17fb040206e6a2ad534a3b2c4dd3875ba5ffe094bfd595a8b79ce3154152f6c13e6df6ec6ecdd85acf4bade876fe000bb8bb8427a048aeea1e37e12e7f5d3e4ccd13d3df6f8d8", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @generic="ff8f16c3f009de0f139d48b3774561bd8a02a62a60ef03fc067fa8404a56abc98b63e67379acf940784ef6d0c2afb16f0fe0d5b103bf", @generic="60e6d9392d88344c9ef1ef2b5e85e50f78f9086878884c0e37cff3e0806ce4ab2dae081da6e2d3509210da3a9b100a98ae4480f05ef3", @generic="30b01f61ac900f7180600d7c3ebbbf18afe32a89070eab65df701d73451741ba089c873c6c206022ab512380154d6ef3290bf8f6dba51e0777e1e118897640117ab07246f006900aa054f1e7d8671f303bf16d1e198d6308ae24126a2a42464030e7f3a19b0fa43142df70bcac9a60ea1ae2f037554b6d1870b9e8b50ed5dc43"]}, @generic="67c17d43a595d66e1ca9c8616a5c532aacbc44fc6aa82592913d6282736453a9a2217d2d558d123ffe99f6566ab068b74b618e0670d78f5e0559cc7b"]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) gettid() (async) prlimit64(r0, 0x3, &(0x7f0000000040)={0x1ff}, &(0x7f0000000080)) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './bus\x00'}) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) (async) sendmsg$nl_netfilter(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x2a4, 0xb, 0xa, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x3}, [@nested={0x251, 0x63, 0x0, 0x1, [@typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @generic="993e997dfa22e7d9553ef54126fa577b544bd512d129254494894e45135a334e15faf0be80e32833e2004603fb35e9da07c69c5a3dd36cb07349cb930ee0e5a116ccdd400ff3af404f79b34f5b0e5e2f8d39b23bce69954eb139cb7b4487acf59dce7b1bc2bbdad795dfed0b872df29967c153", @generic="74dbc93ba0d12c982ed38a26ca0fa374b71767b17aa1db4ebb8e19ef2cf4bc4b15ba137bc8eb7833023cb70cd2e44b96c86b01ef27f7119a3aa509d23c4de3", @generic="aed9077cd7c952caae1d823cc51c5c07611314f523423a839227dcc348eaa759e345e955a88fced0ac9f3aac322bd1bc7eddf1bdfe9bda980e5a982f5cf9ba29554fd70089be40d1ce5b4503f17fb040206e6a2ad534a3b2c4dd3875ba5ffe094bfd595a8b79ce3154152f6c13e6df6ec6ecdd85acf4bade876fe000bb8bb8427a048aeea1e37e12e7f5d3e4ccd13d3df6f8d8", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @generic="ff8f16c3f009de0f139d48b3774561bd8a02a62a60ef03fc067fa8404a56abc98b63e67379acf940784ef6d0c2afb16f0fe0d5b103bf", @generic="60e6d9392d88344c9ef1ef2b5e85e50f78f9086878884c0e37cff3e0806ce4ab2dae081da6e2d3509210da3a9b100a98ae4480f05ef3", @generic="30b01f61ac900f7180600d7c3ebbbf18afe32a89070eab65df701d73451741ba089c873c6c206022ab512380154d6ef3290bf8f6dba51e0777e1e118897640117ab07246f006900aa054f1e7d8671f303bf16d1e198d6308ae24126a2a42464030e7f3a19b0fa43142df70bcac9a60ea1ae2f037554b6d1870b9e8b50ed5dc43"]}, @generic="67c17d43a595d66e1ca9c8616a5c532aacbc44fc6aa82592913d6282736453a9a2217d2d558d123ffe99f6566ab068b74b618e0670d78f5e0559cc7b"]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x8080ffffff80) (async) 03:31:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './bus', [{0x20, '/dev/sg#\x00'}, {0x20, '!-'}, {}, {0x20, '\x00'}, {}], 0xa, "885a69ba40b3caf7dba4fbafbd166885b9d9ad758080b06e4c34731ddabee5812e453b225ec64328f33ccf8550e4166ea28dddc6c4800e6d80c1911fee9d89178ec570f3c1cd4bb8e1eb49e87ea19b850405f6949ec84174c38574692a85b6e82cbba19154f7768e3b5b"}, 0x84) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './bus', [{0x20, '/dev/sg#\x00'}, {0x20, '!-'}, {}, {0x20, '\x00'}, {}], 0xa, "885a69ba40b3caf7dba4fbafbd166885b9d9ad758080b06e4c34731ddabee5812e453b225ec64328f33ccf8550e4166ea28dddc6c4800e6d80c1911fee9d89178ec570f3c1cd4bb8e1eb49e87ea19b850405f6949ec84174c38574692a85b6e82cbba19154f7768e3b5b"}, 0x84) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3044.556451][ C0] sd 0:0:1:0: tag#491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3044.566242][ C0] sd 0:0:1:0: tag#491 CDB: opcode=0xe5 (vendor) [ 3044.572509][ C0] sd 0:0:1:0: tag#491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3044.581454][ C0] sd 0:0:1:0: tag#491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3044.590405][ C0] sd 0:0:1:0: tag#491 CDB[20]: ba 03:31:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x6, 0x5}) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001440)="45b82d2c09de99404a9dae331260a22fdbcd029ca0396f2ddf59698ad402ab589b42d8c7e47cb985fd29efc7c16ee8fdcc7f94ae561d4fc08df539050b7901c3f75f580e07435e63caf5a76593d38b91fd101ac1030793c64965a92cbf86f9e31757a53eb5e67030dc31ad13ad1ac69c90c1c3b054683b917dbf14cbc05364de1f8f90211de4b4067435eaf87deafd68661227db21ffe9984b2cfec4e44770d1c182a502", 0xa4, 0x5, 0x0, 0x3, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000300)="b8ed20e4f285da3c11f414db", 0xc, 0x6, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001540)="733904e5c1d535b1ec047788255419bc17cf4dadc2add3a73cb7b20b99ef12f0a6ab1805f005f23406b2a0fe647c200192ed958599174f7a6d343d9e09f24ab4ba36a2adf84f49e8e4912a1235db1edb6b6b17429c0d0c2f1916540aeedd9651b16691c5d4614d2d968bc177a3a41837e65a64ce99adfa9829b0031bebcddabe0cd47df7fc95e50f6888fd76f775c0c140fcfb04c8251b0d383df571559f355df34c94c2e5d9511c64d331e8bb676ab055ff6e3ffe6cef870ff7cdf05d13bd4d82c7b2318ffc5b6bdcd6cc2a", 0xcc, 0xfc, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="c77468e6bb05eab2513204f6aa20a7425d1fecfe12afa2974647a36e5ccd4043e90aaf741dff6225ebcc3346c8ca8c893747f83acb51457b844bce7de8a7a07dc71bd9d288c651e5891e0058f18f44a8b06e176fdddfe5d31396d0d90817cd5e131f4e8e9153f6fc84b4db820498de1d43605c28c6f806089f6d0f67e6e1744051", 0x81, 0x1, 0x0, 0x4, r3}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setrlimit(0x1, &(0x7f0000000100)={0x6, 0x5}) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001440)="45b82d2c09de99404a9dae331260a22fdbcd029ca0396f2ddf59698ad402ab589b42d8c7e47cb985fd29efc7c16ee8fdcc7f94ae561d4fc08df539050b7901c3f75f580e07435e63caf5a76593d38b91fd101ac1030793c64965a92cbf86f9e31757a53eb5e67030dc31ad13ad1ac69c90c1c3b054683b917dbf14cbc05364de1f8f90211de4b4067435eaf87deafd68661227db21ffe9984b2cfec4e44770d1c182a502", 0xa4, 0x5, 0x0, 0x3, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000300)="b8ed20e4f285da3c11f414db", 0xc, 0x6, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001540)="733904e5c1d535b1ec047788255419bc17cf4dadc2add3a73cb7b20b99ef12f0a6ab1805f005f23406b2a0fe647c200192ed958599174f7a6d343d9e09f24ab4ba36a2adf84f49e8e4912a1235db1edb6b6b17429c0d0c2f1916540aeedd9651b16691c5d4614d2d968bc177a3a41837e65a64ce99adfa9829b0031bebcddabe0cd47df7fc95e50f6888fd76f775c0c140fcfb04c8251b0d383df571559f355df34c94c2e5d9511c64d331e8bb676ab055ff6e3ffe6cef870ff7cdf05d13bd4d82c7b2318ffc5b6bdcd6cc2a", 0xcc, 0xfc, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="c77468e6bb05eab2513204f6aa20a7425d1fecfe12afa2974647a36e5ccd4043e90aaf741dff6225ebcc3346c8ca8c893747f83acb51457b844bce7de8a7a07dc71bd9d288c651e5891e0058f18f44a8b06e176fdddfe5d31396d0d90817cd5e131f4e8e9153f6fc84b4db820498de1d43605c28c6f806089f6d0f67e6e1744051", 0x81, 0x1, 0x0, 0x4, r3}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async, rerun: 64) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) r5 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0x16, 0x80000000, 0x20, "f8cf15f277dcc303cb214afb78cb9257f5e9053c687e"}) 03:31:29 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x3ab440) r3 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x100, 0x2) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x17f, &(0x7f0000000400)=0x0) io_setup(0xc4, &(0x7f0000000040)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r2, 0xd54, 0x6, 0x400}) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000000100)="bca1f83646e58476dad2d64b7a4ced41f24a7c2930c8c716048490f738d7d5e4fe3321ab8e6f23e7f3ff1decd2c0a74da84026fca15ce7b0d2557812e8552cd3857b6930c5c2786ff5cadd88dd4f8e3565db3cc6f3f518e1755e6aa8fc1fa7dd3f7135", 0x63, 0x0, 0x0, 0x1, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x401, r8, &(0x7f0000000180)="87b96e97e79201d470cb5d77401da94e95ddff56391bfa4fd5ba89d8ce07ee376d470a541ee1ccd6f94ba4b63a91e07c552e2244782235059a1eb7f9611423dfddcb4cc30945e89d3261eb68f1f90e7fc804ed033bcbefcf7301e3b250c5679c7317a3473de3a55a70032bc1fc", 0x6d, 0x8, 0x0, 0x4, r9}]) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(r4, 0x0, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) [ 3047.361024][ C0] sd 0:0:1:0: tag#497 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3047.370776][ C0] sd 0:0:1:0: tag#497 CDB: opcode=0xe5 (vendor) [ 3047.377017][ C0] sd 0:0:1:0: tag#497 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3047.385968][ C0] sd 0:0:1:0: tag#497 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3047.394942][ C0] sd 0:0:1:0: tag#497 CDB[20]: ba [ 3047.402047][ C0] sd 0:0:1:0: tag#498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3047.411799][ C0] sd 0:0:1:0: tag#498 CDB: opcode=0xe5 (vendor) [ 3047.418064][ C0] sd 0:0:1:0: tag#498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3047.427011][ C0] sd 0:0:1:0: tag#498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3047.435985][ C0] sd 0:0:1:0: tag#498 CDB[20]: ba 03:31:30 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x3ab440) (async) r3 = creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x100, 0x2) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x17f, &(0x7f0000000400)=0x0) (async) io_setup(0xc4, &(0x7f0000000040)=0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r7, 0x0, r7) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r2, 0xd54, 0x6, 0x400}) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000000100)="bca1f83646e58476dad2d64b7a4ced41f24a7c2930c8c716048490f738d7d5e4fe3321ab8e6f23e7f3ff1decd2c0a74da84026fca15ce7b0d2557812e8552cd3857b6930c5c2786ff5cadd88dd4f8e3565db3cc6f3f518e1755e6aa8fc1fa7dd3f7135", 0x63, 0x0, 0x0, 0x1, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x401, r8, &(0x7f0000000180)="87b96e97e79201d470cb5d77401da94e95ddff56391bfa4fd5ba89d8ce07ee376d470a541ee1ccd6f94ba4b63a91e07c552e2244782235059a1eb7f9611423dfddcb4cc30945e89d3261eb68f1f90e7fc804ed033bcbefcf7301e3b250c5679c7317a3473de3a55a70032bc1fc", 0x6d, 0x8, 0x0, 0x4, r9}]) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(r4, 0x0, 0x4000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) 03:31:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './bus', [{0x20, '/dev/sg#\x00'}, {0x20, '!-'}, {}, {0x20, '\x00'}, {}], 0xa, "885a69ba40b3caf7dba4fbafbd166885b9d9ad758080b06e4c34731ddabee5812e453b225ec64328f33ccf8550e4166ea28dddc6c4800e6d80c1911fee9d89178ec570f3c1cd4bb8e1eb49e87ea19b850405f6949ec84174c38574692a85b6e82cbba19154f7768e3b5b"}, 0x84) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)={'#! ', './bus', [{0x20, '/dev/sg#\x00'}, {0x20, '!-'}, {}, {0x20, '\x00'}, {}], 0xa, "885a69ba40b3caf7dba4fbafbd166885b9d9ad758080b06e4c34731ddabee5812e453b225ec64328f33ccf8550e4166ea28dddc6c4800e6d80c1911fee9d89178ec570f3c1cd4bb8e1eb49e87ea19b850405f6949ec84174c38574692a85b6e82cbba19154f7768e3b5b"}, 0x84) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) r5 = creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0x16, 0x80000000, 0x20, "f8cf15f277dcc303cb214afb78cb9257f5e9053c687e"}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0x16, 0x80000000, 0x20, "f8cf15f277dcc303cb214afb78cb9257f5e9053c687e"}) (async) 03:31:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:32 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) r2 = syz_open_dev$sg(0x0, 0x0, 0x3ab440) r3 = creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x100, 0x2) (async) r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x17f, &(0x7f0000000400)=0x0) (async) io_setup(0xc4, &(0x7f0000000040)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r2, 0xd54, 0x6, 0x400}) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000000100)="bca1f83646e58476dad2d64b7a4ced41f24a7c2930c8c716048490f738d7d5e4fe3321ab8e6f23e7f3ff1decd2c0a74da84026fca15ce7b0d2557812e8552cd3857b6930c5c2786ff5cadd88dd4f8e3565db3cc6f3f518e1755e6aa8fc1fa7dd3f7135", 0x63, 0x0, 0x0, 0x1, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x401, r8, &(0x7f0000000180)="87b96e97e79201d470cb5d77401da94e95ddff56391bfa4fd5ba89d8ce07ee376d470a541ee1ccd6f94ba4b63a91e07c552e2244782235059a1eb7f9611423dfddcb4cc30945e89d3261eb68f1f90e7fc804ed033bcbefcf7301e3b250c5679c7317a3473de3a55a70032bc1fc", 0x6d, 0x8, 0x0, 0x4, r9}]) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(r4, 0x0, 0x4000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) 03:31:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x6, 0x5}) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001440)="45b82d2c09de99404a9dae331260a22fdbcd029ca0396f2ddf59698ad402ab589b42d8c7e47cb985fd29efc7c16ee8fdcc7f94ae561d4fc08df539050b7901c3f75f580e07435e63caf5a76593d38b91fd101ac1030793c64965a92cbf86f9e31757a53eb5e67030dc31ad13ad1ac69c90c1c3b054683b917dbf14cbc05364de1f8f90211de4b4067435eaf87deafd68661227db21ffe9984b2cfec4e44770d1c182a502", 0xa4, 0x5, 0x0, 0x3, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000300)="b8ed20e4f285da3c11f414db", 0xc, 0x6, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001540)="733904e5c1d535b1ec047788255419bc17cf4dadc2add3a73cb7b20b99ef12f0a6ab1805f005f23406b2a0fe647c200192ed958599174f7a6d343d9e09f24ab4ba36a2adf84f49e8e4912a1235db1edb6b6b17429c0d0c2f1916540aeedd9651b16691c5d4614d2d968bc177a3a41837e65a64ce99adfa9829b0031bebcddabe0cd47df7fc95e50f6888fd76f775c0c140fcfb04c8251b0d383df571559f355df34c94c2e5d9511c64d331e8bb676ab055ff6e3ffe6cef870ff7cdf05d13bd4d82c7b2318ffc5b6bdcd6cc2a", 0xcc, 0xfc, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="c77468e6bb05eab2513204f6aa20a7425d1fecfe12afa2974647a36e5ccd4043e90aaf741dff6225ebcc3346c8ca8c893747f83acb51457b844bce7de8a7a07dc71bd9d288c651e5891e0058f18f44a8b06e176fdddfe5d31396d0d90817cd5e131f4e8e9153f6fc84b4db820498de1d43605c28c6f806089f6d0f67e6e1744051", 0x81, 0x1, 0x0, 0x4, r3}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setrlimit(0x1, &(0x7f0000000100)={0x6, 0x5}) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001440)="45b82d2c09de99404a9dae331260a22fdbcd029ca0396f2ddf59698ad402ab589b42d8c7e47cb985fd29efc7c16ee8fdcc7f94ae561d4fc08df539050b7901c3f75f580e07435e63caf5a76593d38b91fd101ac1030793c64965a92cbf86f9e31757a53eb5e67030dc31ad13ad1ac69c90c1c3b054683b917dbf14cbc05364de1f8f90211de4b4067435eaf87deafd68661227db21ffe9984b2cfec4e44770d1c182a502", 0xa4, 0x5, 0x0, 0x3, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x40, r2, &(0x7f0000000300)="b8ed20e4f285da3c11f414db", 0xc, 0x6, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001540)="733904e5c1d535b1ec047788255419bc17cf4dadc2add3a73cb7b20b99ef12f0a6ab1805f005f23406b2a0fe647c200192ed958599174f7a6d343d9e09f24ab4ba36a2adf84f49e8e4912a1235db1edb6b6b17429c0d0c2f1916540aeedd9651b16691c5d4614d2d968bc177a3a41837e65a64ce99adfa9829b0031bebcddabe0cd47df7fc95e50f6888fd76f775c0c140fcfb04c8251b0d383df571559f355df34c94c2e5d9511c64d331e8bb676ab055ff6e3ffe6cef870ff7cdf05d13bd4d82c7b2318ffc5b6bdcd6cc2a", 0xcc, 0xfc, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="c77468e6bb05eab2513204f6aa20a7425d1fecfe12afa2974647a36e5ccd4043e90aaf741dff6225ebcc3346c8ca8c893747f83acb51457b844bce7de8a7a07dc71bd9d288c651e5891e0058f18f44a8b06e176fdddfe5d31396d0d90817cd5e131f4e8e9153f6fc84b4db820498de1d43605c28c6f806089f6d0f67e6e1744051", 0x81, 0x1, 0x0, 0x4, r3}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3049.377898][ C0] sd 0:0:1:0: tag#510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3049.387702][ C0] sd 0:0:1:0: tag#510 CDB: opcode=0xe5 (vendor) [ 3049.393985][ C0] sd 0:0:1:0: tag#510 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3049.402941][ C0] sd 0:0:1:0: tag#510 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3049.411866][ C0] sd 0:0:1:0: tag#510 CDB[20]: ba [ 3051.339081][ C0] sd 0:0:1:0: tag#451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3051.348889][ C0] sd 0:0:1:0: tag#451 CDB: opcode=0xe5 (vendor) [ 3051.355194][ C0] sd 0:0:1:0: tag#451 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3051.364142][ C0] sd 0:0:1:0: tag#451 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3051.373105][ C0] sd 0:0:1:0: tag#451 CDB[20]: ba 03:31:34 executing program 1: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x24) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3051.465312][ C1] sd 0:0:1:0: tag#452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3051.475094][ C1] sd 0:0:1:0: tag#452 CDB: opcode=0xe5 (vendor) [ 3051.481333][ C1] sd 0:0:1:0: tag#452 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3051.490315][ C1] sd 0:0:1:0: tag#452 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3051.499276][ C1] sd 0:0:1:0: tag#452 CDB[20]: ba [ 3051.539898][ C0] sd 0:0:1:0: tag#458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3051.549643][ C0] sd 0:0:1:0: tag#458 CDB: opcode=0xe5 (vendor) [ 3051.555903][ C0] sd 0:0:1:0: tag#458 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3051.564848][ C0] sd 0:0:1:0: tag#458 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3051.573789][ C0] sd 0:0:1:0: tag#458 CDB[20]: ba 03:31:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000cf67d9000000007c540ebf46a94021a7f60100000000"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x1, 0x1}) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage=0x5, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x4000000007fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001440)={0x0, 0x1, {0x9d6, @struct={0x5}, 0x0, 0x8, 0x3, 0xfff, 0x1, 0x7a, 0x0, @usage=0x88, 0x1, 0xfe15, [0x3f, 0x1, 0x100, 0x0, 0x9, 0xb64]}, {0x98, @usage=0x2, r2, 0x57, 0x1ff, 0xde, 0x2, 0x2, 0x420, @struct={0x3ff, 0x6}, 0xb4b5, 0x0, [0x9, 0x2, 0x4, 0x0, 0x8001, 0x7ba]}, {0x2c5, @struct={0x2, 0x1}, 0x0, 0x1, 0xed31, 0x3, 0x63, 0x0, 0x14, @struct={0xaccc, 0x1}, 0x23, 0x9, [0x100000001, 0x5, 0x8, 0x3, 0x4, 0x8]}, {0x10001, 0x80000001, 0x20}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{}, 0x0, 0x2e, @unused=[0x1f, 0x0, 0x100000000, 0x3], @devid=r7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffffc, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x4, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{r0}, 0x0, 0x8, @inherit={0x68, &(0x7f0000000200)={0x1, 0x4, 0xb, 0x3, {0x6, 0x10001, 0x40, 0x40, 0x3ff}, [0x6, 0x9, 0x2, 0x81]}}, @subvolid=0x3}) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:34 executing program 1: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x24) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) [ 3051.851708][ C1] sd 0:0:1:0: tag#474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3051.861506][ C1] sd 0:0:1:0: tag#474 CDB: opcode=0xe5 (vendor) [ 3051.867764][ C1] sd 0:0:1:0: tag#474 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3051.876735][ C1] sd 0:0:1:0: tag#474 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3051.885693][ C1] sd 0:0:1:0: tag#474 CDB[20]: ba [ 3054.380432][ C1] sd 0:0:1:0: tag#493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3054.390253][ C1] sd 0:0:1:0: tag#493 CDB: opcode=0xe5 (vendor) [ 3054.396517][ C1] sd 0:0:1:0: tag#493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3054.405527][ C1] sd 0:0:1:0: tag#493 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3054.414484][ C1] sd 0:0:1:0: tag#493 CDB[20]: ba 03:31:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x1, 0x1}) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage=0x5, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x4000000007fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001440)={0x0, 0x1, {0x9d6, @struct={0x5}, 0x0, 0x8, 0x3, 0xfff, 0x1, 0x7a, 0x0, @usage=0x88, 0x1, 0xfe15, [0x3f, 0x1, 0x100, 0x0, 0x9, 0xb64]}, {0x98, @usage=0x2, r2, 0x57, 0x1ff, 0xde, 0x2, 0x2, 0x420, @struct={0x3ff, 0x6}, 0xb4b5, 0x0, [0x9, 0x2, 0x4, 0x0, 0x8001, 0x7ba]}, {0x2c5, @struct={0x2, 0x1}, 0x0, 0x1, 0xed31, 0x3, 0x63, 0x0, 0x14, @struct={0xaccc, 0x1}, 0x23, 0x9, [0x100000001, 0x5, 0x8, 0x3, 0x4, 0x8]}, {0x10001, 0x80000001, 0x20}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{}, 0x0, 0x2e, @unused=[0x1f, 0x0, 0x100000000, 0x3], @devid=r7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setrlimit(0x0, &(0x7f0000000100)={0x1, 0x1}) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage=0x5, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x4000000007fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001440)={0x0, 0x1, {0x9d6, @struct={0x5}, 0x0, 0x8, 0x3, 0xfff, 0x1, 0x7a, 0x0, @usage=0x88, 0x1, 0xfe15, [0x3f, 0x1, 0x100, 0x0, 0x9, 0xb64]}, {0x98, @usage=0x2, r2, 0x57, 0x1ff, 0xde, 0x2, 0x2, 0x420, @struct={0x3ff, 0x6}, 0xb4b5, 0x0, [0x9, 0x2, 0x4, 0x0, 0x8001, 0x7ba]}, {0x2c5, @struct={0x2, 0x1}, 0x0, 0x1, 0xed31, 0x3, 0x63, 0x0, 0x14, @struct={0xaccc, 0x1}, 0x23, 0x9, [0x100000001, 0x5, 0x8, 0x3, 0x4, 0x8]}, {0x10001, 0x80000001, 0x20}}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{}, 0x0, 0x2e, @unused=[0x1f, 0x0, 0x100000000, 0x3], @devid=r7}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:38 executing program 1: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0x24) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) [ 3055.679588][ C0] sd 0:0:1:0: tag#664 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3055.689348][ C0] sd 0:0:1:0: tag#664 CDB: opcode=0xe5 (vendor) [ 3055.695642][ C0] sd 0:0:1:0: tag#664 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3055.704605][ C0] sd 0:0:1:0: tag#664 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3055.713586][ C0] sd 0:0:1:0: tag#664 CDB[20]: ba 03:31:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3055.734607][ C0] sd 0:0:1:0: tag#665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3055.744366][ C0] sd 0:0:1:0: tag#665 CDB: opcode=0xe5 (vendor) [ 3055.750598][ C0] sd 0:0:1:0: tag#665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3055.759548][ C0] sd 0:0:1:0: tag#665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3055.768505][ C0] sd 0:0:1:0: tag#665 CDB[20]: ba 03:31:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000cf67d9000000007c540ebf46a94021a7f60100000000"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000cf67d9000000007c540ebf46a94021a7f60100000000"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setrlimit(0x0, &(0x7f0000000100)={0x1, 0x1}) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @usage=0x5, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x4000000007fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001440)={0x0, 0x1, {0x9d6, @struct={0x5}, 0x0, 0x8, 0x3, 0xfff, 0x1, 0x7a, 0x0, @usage=0x88, 0x1, 0xfe15, [0x3f, 0x1, 0x100, 0x0, 0x9, 0xb64]}, {0x98, @usage=0x2, r2, 0x57, 0x1ff, 0xde, 0x2, 0x2, 0x420, @struct={0x3ff, 0x6}, 0xb4b5, 0x0, [0x9, 0x2, 0x4, 0x0, 0x8001, 0x7ba]}, {0x2c5, @struct={0x2, 0x1}, 0x0, 0x1, 0xed31, 0x3, 0x63, 0x0, 0x14, @struct={0xaccc, 0x1}, 0x23, 0x9, [0x100000001, 0x5, 0x8, 0x3, 0x4, 0x8]}, {0x10001, 0x80000001, 0x20}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{}, 0x0, 0x2e, @unused=[0x1f, 0x0, 0x100000000, 0x3], @devid=r7}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffffc, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x4, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{r0}, 0x0, 0x8, @inherit={0x68, &(0x7f0000000200)={0x1, 0x4, 0xb, 0x3, {0x6, 0x10001, 0x40, 0x40, 0x3ff}, [0x6, 0x9, 0x2, 0x81]}}, @subvolid=0x3}) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3055.956542][ C0] sd 0:0:1:0: tag#741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3055.966315][ C0] sd 0:0:1:0: tag#741 CDB: opcode=0xe5 (vendor) [ 3055.972595][ C0] sd 0:0:1:0: tag#741 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3055.981521][ C0] sd 0:0:1:0: tag#741 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3055.990478][ C0] sd 0:0:1:0: tag#741 CDB[20]: ba [ 3058.366871][ C0] sd 0:0:1:0: tag#753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3058.376652][ C0] sd 0:0:1:0: tag#753 CDB: opcode=0xe5 (vendor) [ 3058.382949][ C0] sd 0:0:1:0: tag#753 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3058.391878][ C0] sd 0:0:1:0: tag#753 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3058.400862][ C0] sd 0:0:1:0: tag#753 CDB[20]: ba 03:31:42 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xad4) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x6, 0x0, 0x9a, 0x0, 0x9, 0xfffff800, 0x5}, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000cf67d9000000007c540ebf46a94021a7f60100000000"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3059.576635][ C1] sd 0:0:1:0: tag#777 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3059.586439][ C1] sd 0:0:1:0: tag#777 CDB: opcode=0xe5 (vendor) [ 3059.592735][ C1] sd 0:0:1:0: tag#777 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3059.601699][ C1] sd 0:0:1:0: tag#777 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3059.608235][ C0] sd 0:0:1:0: tag#738 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3059.610688][ C1] sd 0:0:1:0: tag#777 CDB[20]: ba 03:31:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffffffc, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x4, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001980)={{r0}, 0x0, 0x8, @inherit={0x68, &(0x7f0000000200)={0x1, 0x4, 0xb, 0x3, {0x6, 0x10001, 0x40, 0x40, 0x3ff}, [0x6, 0x9, 0x2, 0x81]}}, @subvolid=0x3}) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:42 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xad4) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x6, 0x0, 0x9a, 0x0, 0x9, 0xfffff800, 0x5}, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xad4) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) gettid() (async) ptrace$setopts(0x4206, r4, 0x0, 0x0) (async) tkill(r4, 0x40) (async) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) (async) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x6, 0x0, 0x9a, 0x0, 0x9, 0xfffff800, 0x5}, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) [ 3059.620359][ C0] sd 0:0:1:0: tag#738 CDB: opcode=0xe5 (vendor) [ 3059.620394][ C0] sd 0:0:1:0: tag#738 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3059.640570][ C0] sd 0:0:1:0: tag#738 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3059.649532][ C0] sd 0:0:1:0: tag#738 CDB[20]: ba 03:31:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6bf, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0xffffffffffffffc6, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x80000000001000, 0x74, 0x4a0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f85, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0xacaf, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x10001, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x407fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000200000000000000000"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="90000000240000000717d8000800000000000000800000b9f4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b1327fa8065d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3059.844298][ C1] sd 0:0:1:0: tag#778 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3059.854117][ C1] sd 0:0:1:0: tag#778 CDB: opcode=0xe5 (vendor) [ 3059.860372][ C1] sd 0:0:1:0: tag#778 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3059.869365][ C1] sd 0:0:1:0: tag#778 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3059.878359][ C1] sd 0:0:1:0: tag#778 CDB[20]: ba [ 3061.378502][ C0] sd 0:0:1:0: tag#740 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3061.388282][ C0] sd 0:0:1:0: tag#740 CDB: opcode=0xe5 (vendor) [ 3061.394553][ C0] sd 0:0:1:0: tag#740 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3061.403513][ C0] sd 0:0:1:0: tag#740 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3061.412463][ C0] sd 0:0:1:0: tag#740 CDB[20]: ba 03:31:46 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xad4) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) (async) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) (async) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x6, 0x0, 0x9a, 0x0, 0x9, 0xfffff800, 0x5}, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3063.656994][ C1] sd 0:0:1:0: tag#966 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3063.666827][ C1] sd 0:0:1:0: tag#966 CDB: opcode=0xe5 (vendor) [ 3063.673117][ C1] sd 0:0:1:0: tag#966 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3063.682104][ C1] sd 0:0:1:0: tag#966 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3063.691057][ C1] sd 0:0:1:0: tag#966 CDB[20]: ba [ 3065.335291][ C0] sd 0:0:1:0: tag#776 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3065.345056][ C0] sd 0:0:1:0: tag#776 CDB: opcode=0xe5 (vendor) [ 3065.351305][ C0] sd 0:0:1:0: tag#776 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3065.360276][ C0] sd 0:0:1:0: tag#776 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3065.369225][ C0] sd 0:0:1:0: tag#776 CDB[20]: ba [ 3065.374848][ C0] sd 0:0:1:0: tag#777 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3065.384608][ C0] sd 0:0:1:0: tag#777 CDB: opcode=0xe5 (vendor) [ 3065.390860][ C0] sd 0:0:1:0: tag#777 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3065.399825][ C0] sd 0:0:1:0: tag#777 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3065.408774][ C0] sd 0:0:1:0: tag#777 CDB[20]: ba 03:31:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 32) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6bf, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0xffffffffffffffc6, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x80000000001000, 0x74, 0x4a0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f85, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0xacaf, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:48 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) io_setup(0x1ff, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7ff, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) [ 3065.781199][ C1] sd 0:0:1:0: tag#967 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3065.790977][ C1] sd 0:0:1:0: tag#967 CDB: opcode=0xe5 (vendor) [ 3065.797246][ C1] sd 0:0:1:0: tag#967 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3065.806232][ C1] sd 0:0:1:0: tag#967 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3065.815211][ C1] sd 0:0:1:0: tag#967 CDB[20]: ba 03:31:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x10001, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x407fff, 0x3, 0x7fff}}) (async, rerun: 32) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 32) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000200000000000000000"], 0x30}}, 0x4048010) (async, rerun: 64) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="90000000240000000717d8000800000000000000800000b9f4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b1327fa8065d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async, rerun: 64) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:51 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7ff, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x8080ffffff80) (rerun: 64) 03:31:51 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) io_setup(0x1ff, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7ff, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x4) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7ff, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:31:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3068.356807][ C1] sd 0:0:1:0: tag#972 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3068.366597][ C1] sd 0:0:1:0: tag#972 CDB: opcode=0xe5 (vendor) [ 3068.372869][ C1] sd 0:0:1:0: tag#972 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3068.381798][ C1] sd 0:0:1:0: tag#972 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3068.390749][ C1] sd 0:0:1:0: tag#972 CDB[20]: ba 03:31:54 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x0, 0x1f]}, 0x8) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x10001, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x407fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000200000000000000000"], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="90000000240000000717d8000800000000000000800000b9f4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b1327fa8065d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x10001, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x407fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000200000000000000000"], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="90000000240000000717d8000800000000000000800000b9f4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b1327fa8065d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd30000"], 0x282) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:31:54 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x0, 0x1f]}, 0x8) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{}, 0x0, 0x14, @inherit={0x68, &(0x7f0000000740)=ANY=[@ANYBLOB="00bd00000000000204000000000000f60000000000000000ffffffff000000001400000000000000ffff00000000000000010000000100000006000000000000006496000000000000ff0700"/96]}, @subvolid=0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001980)={{}, 0x0, 0x22, @unused=[0x9, 0x1, 0x7, 0x7], @subvolid}) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3071.568415][ C0] sd 0:0:1:0: tag#977 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3071.578215][ C0] sd 0:0:1:0: tag#977 CDB: opcode=0xe5 (vendor) [ 3071.584484][ C0] sd 0:0:1:0: tag#977 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3071.593452][ C0] sd 0:0:1:0: tag#977 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3071.602409][ C0] sd 0:0:1:0: tag#977 CDB[20]: ba 03:31:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6bf, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0xffffffffffffffc6, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x80000000001000, 0x74, 0x4a0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f85, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0xacaf, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setrlimit(0x9, &(0x7f0000000040)={0x9, 0x2}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:55 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x0, 0x1f]}, 0x8) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:31:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{}, 0x0, 0x14, @inherit={0x68, &(0x7f0000000740)=ANY=[@ANYBLOB="00bd00000000000204000000000000f60000000000000000ffffffff000000001400000000000000ffff00000000000000010000000100000006000000000000006496000000000000ff0700"/96]}, @subvolid=0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001980)={{}, 0x0, 0x22, @unused=[0x9, 0x1, 0x7, 0x7], @subvolid}) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3072.634385][ C0] sd 0:0:1:0: tag#1018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3072.644247][ C0] sd 0:0:1:0: tag#1018 CDB: opcode=0xe5 (vendor) [ 3072.645712][ C1] sd 0:0:1:0: tag#1019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3072.650571][ C0] sd 0:0:1:0: tag#1018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3072.650590][ C0] sd 0:0:1:0: tag#1018 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3072.660392][ C1] sd 0:0:1:0: tag#1019 CDB: opcode=0xe5 (vendor) [ 3072.669403][ C0] sd 0:0:1:0: tag#1018 CDB[20]: ba [ 3072.678434][ C1] sd 0:0:1:0: tag#1019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3072.696091][ C0] sd 0:0:1:0: tag#1020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3072.698852][ C1] sd 0:0:1:0: tag#1019 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3072.708650][ C0] sd 0:0:1:0: tag#1020 CDB: opcode=0xe5 (vendor) [ 3072.717669][ C1] sd 0:0:1:0: tag#1019 CDB[20]: ba [ 3072.723992][ C0] sd 0:0:1:0: tag#1020 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3072.738095][ C0] sd 0:0:1:0: tag#1020 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3072.747147][ C0] sd 0:0:1:0: tag#1020 CDB[20]: ba 03:31:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{}, 0x0, 0x14, @inherit={0x68, &(0x7f0000000740)=ANY=[@ANYBLOB="00bd00000000000204000000000000f60000000000000000ffffffff000000001400000000000000ffff00000000000000010000000100000006000000000000006496000000000000ff0700"/96]}, @subvolid=0x4}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001980)={{}, 0x0, 0x22, @unused=[0x9, 0x1, 0x7, 0x7], @subvolid}) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3074.352819][ C0] sd 0:0:1:0: tag#1021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3074.362685][ C0] sd 0:0:1:0: tag#1021 CDB: opcode=0xe5 (vendor) [ 3074.369702][ C0] sd 0:0:1:0: tag#1021 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3074.378764][ C0] sd 0:0:1:0: tag#1021 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3074.387834][ C0] sd 0:0:1:0: tag#1021 CDB[20]: ba 03:31:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) setrlimit(0x9, &(0x7f0000000040)={0x9, 0x2}) (rerun: 32) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async, rerun: 32) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (rerun: 32) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) r5 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x14400) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001980)={{r5}, "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"}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:31:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x27, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @local, @empty}, 0xc) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000100)='./bus\x00', 0x18) [ 3075.742702][ C1] sd 0:0:1:0: tag#983 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3075.752513][ C1] sd 0:0:1:0: tag#983 CDB: opcode=0xe5 (vendor) [ 3075.758766][ C1] sd 0:0:1:0: tag#983 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3075.767724][ C1] sd 0:0:1:0: tag#983 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3075.776671][ C1] sd 0:0:1:0: tag#983 CDB[20]: ba [ 3077.324546][ C0] sd 0:0:1:0: tag#984 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3077.334323][ C0] sd 0:0:1:0: tag#984 CDB: opcode=0xe5 (vendor) [ 3077.340576][ C0] sd 0:0:1:0: tag#984 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3077.349567][ C0] sd 0:0:1:0: tag#984 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3077.358533][ C0] sd 0:0:1:0: tag#984 CDB[20]: ba 03:32:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b000000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setrlimit(0x9, &(0x7f0000000040)={0x9, 0x2}) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3079.157808][ C0] sd 0:0:1:0: tag#1044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3079.167663][ C0] sd 0:0:1:0: tag#1044 CDB: opcode=0xe5 (vendor) [ 3079.174033][ C0] sd 0:0:1:0: tag#1044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3079.183075][ C0] sd 0:0:1:0: tag#1044 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3079.192136][ C0] sd 0:0:1:0: tag#1044 CDB[20]: ba [ 3079.219951][ C1] sd 0:0:1:0: tag#977 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3079.229734][ C1] sd 0:0:1:0: tag#977 CDB: opcode=0xe5 (vendor) [ 3079.235998][ C1] sd 0:0:1:0: tag#977 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3079.244971][ C1] sd 0:0:1:0: tag#977 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3079.253961][ C1] sd 0:0:1:0: tag#977 CDB[20]: ba 03:32:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x10a00, 0x1, 0x0, 0x0, 0xfff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0xfffffffffffffff7, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0xffffffff, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e464387498eeed0319615b0fe1c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad00004000000000000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f00000015c0)="7cafd4665b0e7f80c8ba23fcf6071c40c10be9819da6b23f94fba3be8eb6532800f6ae580f05109ec31a3acdf3012f9aacc593e6ae2e89b6ea9507321213572af81a1ecd83a0617a1ae29bf1558eb53132f6967ee8f91435bd1ff2cc489db45a1cf0a58bb770803d97aec2c62b0b8689553c424f8ef4b0711e4229a8bd18f13a6f325d7db1c30ab73a6285ea34050e32a493865bdd325fb3a3e8e65fc7f7c0da17e0b19874174df30b1d8fbc581c3a0ece218eb34eb217", 0xb7, 0x1, 0x0, 0x2, r3}]) 03:32:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) r5 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x14400) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001980)={{r5}, "aef8a9d424de84fcde495a0253abbc2203bd27b897b8f0b677ebd5a86785d4da6921ded9a367c4fd447cdca53306927666692e9d1d9f34061bfcb3d3d4d32dc2f20f2f34ede54e18be56695730ad22fe11872e74e008267673748af7331f7df8e5797f74ffbbe0f37e3739cde223c9c5b83dd12f2c32d170b4227ff15adaf509a49e6b9d57d92f273e35fb2dbda95f74f74fecb9d9a330104b0bb10703166fc188d0bfc7650eb0303d979ef9ebce66084d51954beceffcdb0b7f10745134118aa3c5a84a10955fe14c9db02af00ad3dee0d0d13c899e282bedd17315218c88fd48b1d31011812a4be9b6f38455e78fc0f49b9f60b7a6c3072208d40377d6c0603c02886207308b0159fbb5530fcefb4754a7d7ddb2f87ecdfd97b8e8f627b2f9469a696ad714a89af0fb6255d6f7b2c25979f1581195365f36b6fe4336fecfc06536cd042233684614c57bc11d60f0997d0bce074cdf3b19d6303757b7fd2d4886f1c80897fd92e36818054fce4f0417581dff841043d9f22a05d51974da6833b8b80d745a874e62df7c11d10e1715cfe6c1ccc7f2a71cc4af2b4e1c936eb77b78d0a7ef2ee4cb2a0c67b0ea7bbd0740681debb27f8ca535e231625f81e15860eacde4be3069611f05b0a04d5af7fd735a8418683df16af52a7543448e2912b1bed59636fc964736a50345c82972289c4712b068995a6c3778bebef77d2d8b277f9a06305bce030418f6e7dfc717f840bff69de3948b2991758cb8d9604eef48e38236844d6e674a90197ee10479ebf2479266d4ba3c17679cd5d0bf33ce4c5bc66e1b91872a0d4bf0bd9fa388dfd4b094ede2d3e79faa34d83255e58a82ec9e9126dff2e6d1db1a6231328a03731f3006aea960c088b409ce3dc16dd4a3296e3936f7a2ecd4411e6e07ab091f0751ce9ce6552a148f8e695e934fe6a53bd908de16f6baac41bfda1b19837ecab66cc902a74587f8555b3e9e975ee40af9b6ecbae791ea6e607f236d1bfe44834aa7109ebcfc11f102da154284a2fb285001a212c6226f416d19a82b25a201eeee9e0901aa8e6fda2da69241560b48de9934b06c06da15774a8ba9ce17b7a9c5e335d97814e5f22058a90f84296a3913d8a29b056840ae78f36d752e25b6a9e3342dcf19b5bec0237699541c032fa06e8d7633a41aa37856e587001e8f5926a7c38f40f766cfd2374a313053c4c1167a484011b31c50ea0473a0042f8e8665b386c94046690492eb649ed8b21a1928b2b66d66cb6f1981756923a40531939764876682e72a8e0838223477d46d4be107eec8b6056aea775d7cd6a22fd9546c4695d55713ac1e4299e85a960a52713a7cf7fef3bacbafdd858a38c457a4e72d330e100e0ab96ba12e4852aa294334731fec7d60c9ab3157993f64ba925356b0123e1fe863de8d14175d31c8d47942356fa66916daa89abc54a557b3faf2418706e6d99cce57b95aa21c7f6ddb3176398b1e4420a65dd3165c8177aec02576c530104cfd201ed07d9fe3e997ea726a45d2f6e5eba4afebba566aac3e5861cc58129729be4654833dd2c21d00bedc86d65333ea0edafd962aa03b4f4a263ba3882e728900075100e4752d041690e867e7b3a3ceadc27ced510053af2ff230fc1ea29da8b4f83144d3bd8cd0bf79d5f1c666b0e32df102bc1633456d24357411d3c1dc9f5da4e73dd21708b1aed585bfdfef3233677df29f04147502bdc73ddd74ae9b2805a2642b7065399407011811bcd05c7c4a44015c57767066c1b1d44c547b70ba1a471ed545e628a8c34de139fbecec46fdff5a983956d7374de157f80cebdc6f6cbd1f309212afe4f64b59d74b80bcd393835f4127ba2240ed88d976fa83332ee2dda36ec4193797b93262219e1532b35ec3428e11eab88c14bd8d73593370ffe796321ec5e8fdfdee9564aaabf1464895c4216afb875d6cec1776854cb9890c6323c0f0b6834a4ad4739174b760d00e8e6947ff79d8e3a3333c46914b1be172e762803d10c799a8cb3321d06bab18d14ccf9ca99ab9458cee4ed2fc998af5f0da93c0d5f4606575c1e8f68b8b1c02ed537af4d14245b80ce13c5cea7366b9737ad082848b69b24eb5d8e166902b1c01f374bbe5a0d989de993894b0764337df6474d30a9479aae83b2efcb554434327c084329632c2bccbd89da24e8090c14359aa1d9d3222b16d42a052927404ead02a376dfcb51d4a733c9b32860a5a91cbdd4dee01706f0dcc6930bd4d95e60193f78e0ffa07037ef2290d891233dc351a163d5057a56f1c81608e00c2e3009d86d99030ef726b40b1f7e0d7ecb092cbe216ec7e7b0c1807ca471e8eaf106afeaab3c1f6d74c37faf90af9e957a5c8adcd2eac39c59f5cc17a8ea5a78b634101cc17964e3b947b74d8012c007ae302d4d617a153d97c5cd7464bcbd5a950cc7503cbd729eb762fafaf9cfc8c7eb9fda502f4a47ad947704acf9cc9a4439e16346736f7bed384de18e240e5d5ff082dd3d0fa24b88fa32daa49586f295b16262664d06631e93ed9e7ce1db03fd07730e2a1cba7c204ae3a736ba05d5c823eb3c428c14c4a22b1a7246f357f7dc7400f2cef728e63dd62efb1517554adee5767d7db10dfa94677e0d6ce7e3d7c11c806a11cdb166354e12fac413f0b4784ff1f23331971d68aae7da66962b7860caebf6f0944f8c0c301225037fc50b8236c6d655f65752ea6362f58f453219489334498e088562fbbf084ceb42c6d1a886cd77b0c90703a4bb057e8d6381b1800bed340e8624ab513249178626e65d6ac6c294b699b390b4e61d9c8c35ec2502162d9d9d9278cc8e06ec07a83222d7144df8a0b336b3ca4f3b22a137d0be25bef5e7f891ccab734cf9b1e86e31562b640aa21fe20a097ce5348e8b999982b6bc2e60c1700f7903b254aa34fa9b7143bcbec791e351bc079054a664654a8fd47cfe8f7273ef943d0d58c64f5da4817e60df35c111f632d7404b7ecce4a8a0a0523318e473c50e4ea3ec021c811fd7bf3d1540c2d61a10dac96179efb85dee259c714c0637ddd370e08ac5feae80ab54afa1098909a41b1f576e04c958cd22fd7c37efe3943ac54769e1644fbc125116e2a7034d8906f975137be6e76f8c2b57f4e65a1f2924ae0c8e0baccd8496538defc005b5a1a789339287f654270434551873e370b61551ab5186668a410e1ed72618b61848c9a1d63141869ba847d0c84160c8d5739e0a502435074a5a122b36dbe305f4ba0b318f3c84a0ff6871016dc9a437ff716c2f3704aaf1f2e05646dd4bb8f5b10e3d8217cb255f952eba64492f5c8917c12da959ac0759536e21e4c41e6e61d5f5d35b71755b3a54636c01d16ee3bc72d0c441cbc1731613526bab4651c4958f217a282ce2818a8f0e6c23d4c6a0137adf90964125bd18a099ce23b65987bd8e924c9275abfb0d1cf2068877d8a0a3d880229a58e5866929d0be17f1e2e2b55da4923569aee7fec127affa22337301150b3a6d2ec33676bafb60309397f6d88d40c03206b765d61363b00eb458cbc70659e1339573b4acf9c3fc0fb68bef4a49771d783c0ec47bf5df8317576a5a624410de3cad85498e71de6f19894f1ee8799e8aa1bf1b29b394bddbd3bb42c927148aeea682c175ac37264ede6c248c38ee8934fce42d22478e38cc7b58f37956834376fa002ea72cf7d75191788727fd3c5e74f7f894cea881241c5793ca0656f3a29146a87b3733a885c98775ec10f3ae8cda3136f0500ebfacd5125774b286158eaa8dea718cb6751a8fafd0838e41f6dc8b982695dc118dfb2992a0a4e8fa217e2689afde724a6ab17374e9571e71b5cec309daa454434dd2715e6a34fbd72912b2d0d945b0f47fe10f6f37377445d73f2c0536903d162f08e985cd14e3fd105b244122917d6484940f14ae656254c0ba74f08af3787e05b6f6f98bee7bd2ee743c54d22d63043818209a0a0e6da7eb4b1a4340197c20fdfdf9c71e6f993e01ae3c973fcab7f7482b0169b37b488ed8bc0422491ab7c9d33b5aa3f6d0080cff03ead05e7a83bc989c5793a171b981af4cf55d3b51a532d53fb819e2e94ffd70da68d51c3dac1902a35f533386d00b110ed410732d1c369c199727411a2410750aac1145e1f252ff15f3b26e106a73944310c2490fc121e53f8ec8df2d0ca6032485e5442def2f7fbfdffda10f16cefff4c9a7fefb08c6adc6b354e3dd1381428a108edb5dba7795a97db7a03eca7b08934adfc35ac03002dc04d425e75aff1567d56d2af3b8edbfed3c9fef44c2729f5ceda9ed2d9e9a568b2c86fd5f093ad4f344cde6015c925eb3def8dc6ea3c97770b9a603ba1c242be80242cd8d0f82a315b849167690372c5e2e9d6f0548268ed1d0434e9590cb6af839b5b27f425ee8b9ff99960db7b19ddf4b113fd62a41740c7c26ef12f6898c2ba3bf0dfbd3fda27d7992e274e0171144593168f1c1c99bfb8c17e035e130c6ee771a95fcadf4860fb566d1f8d9535ceaf7f34bdd431299ba07803e6829809bcb914ca5d766edc70b4d20e0f03cc90936c0f75ff72a48f4881c7e8a12d670439c1773b7b7660a61814b7213262eb15c774e293104d0b20e2cbb478f3b6c7a246acbd52c62c4e009a32135514011455a828bd567a42941cba10ffbf2f71546e8d98fed34c84ef3e0c5e68d786f67f94bca0015ee0bc0cf0997fd2f624a449a74d002392dc845ccec3a5182ebb4be9c152b47498a41c2d6c1df1afed9538cbf4005e3fba243025871a31302d4cc0a256f6a1cd81b24d403095dba7a9d1e8bbd7884c8c70fabb908c5b0514e4442172e91bcb5bdbd7b93bf48bcc0c9bc5ea5de151b0b77a1023fd367c892bbd2a83d295bc8483a95de8b76b09a220e7199c2ac8ea78eeed353da4216849a55fac214c21ce36f32be5f69163abc58887296330208b150b3e09fe49b236d5d38ac262be913a2ef4afa97b277194591ceaf3f5ccacae39e9f33651555ccaa3df129818e5b80181d39e596e659232a657a452271f674d95b5b02645a3c7651865429e22694f6b8d730fc5b973ee8ba7dd588812605b00f1ee3f2f18d13491a26d88d2cc1ea43e297b277f8434e60371a14edbbf4c1681a0f6d20d540e84e973c45e292314cac7c95c33074b5a1b56f5d0020635650a09bf11a37245fa8f65e2b908be9b0ea71477d9535a36530898f56650860763316a40f833abcfe46c500f5d7304c95c23c33a86a8cf938bea5481bd15173739821858e0aa9d83d6430a023c80c395b507bc9c8bec50da55e4e82ab7978e14ba0edc0926d2e824d0b83b44f4afd62ad445651f2c9b5b2698096af754d6e9d56e2c79abd7547988c3876cebc73b77882b9b5c2e6ea6c8677bf1fc43a7c5953122a271164c3015c84ad64704b566a81eb7b3d45d0bb422cbd4eb492c0006700526a210e2c9ee85265f8c0342c810bb732728cfe385ff8c3a39b3ff461b603e9a6e6451fb7c4253cd85cf1816c6b650ef15f53f3ff67115a270c895e932f4d07d91a262c69da9b8f6896679bfcd56f886ca21ab0a1ef1607e36940f37d8dead08425ba7380ab6d7b60516adb024219c6fc8b6e5ded89d50d93c015d00fdf2acd0bd5d8102f5abd9f51aa61b84ae0ad5b98e3024e6da92f8ddb46c1eb1ac0d697e6c3d54490c85a7e167b0eafd0ffcb801fdd5da38e4fd8b23195b8448dfb99a340c25f51d993cbe585c149296b57f59bc6a2bb1fc54353c31f3cc2a8cd3e1d7a25116134a1ca4e36c88e33aa2a253e7e252f0d86541"}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 32) creat(&(0x7f0000000740)='./bus\x00', 0x0) (rerun: 32) [ 3079.879496][ C1] sd 0:0:1:0: tag#1156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3079.889411][ C1] sd 0:0:1:0: tag#1156 CDB: opcode=0xe5 (vendor) [ 3079.895809][ C1] sd 0:0:1:0: tag#1156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3079.904888][ C1] sd 0:0:1:0: tag#1156 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3079.913961][ C1] sd 0:0:1:0: tag#1156 CDB[20]: ba 03:32:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b0000000000000000"], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3082.303299][ C0] sd 0:0:1:0: tag#1184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3082.313154][ C0] sd 0:0:1:0: tag#1184 CDB: opcode=0xe5 (vendor) [ 3082.319487][ C0] sd 0:0:1:0: tag#1184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3082.328532][ C0] sd 0:0:1:0: tag#1184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3082.337576][ C0] sd 0:0:1:0: tag#1184 CDB[20]: ba 03:32:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x27, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) r5 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @local, @empty}, 0xc) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000100)='./bus\x00', 0x18) 03:32:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3082.754842][ C0] sd 0:0:1:0: tag#1197 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3082.764714][ C0] sd 0:0:1:0: tag#1197 CDB: opcode=0xe5 (vendor) [ 3082.771036][ C0] sd 0:0:1:0: tag#1197 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3082.780080][ C0] sd 0:0:1:0: tag#1197 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3082.789112][ C0] sd 0:0:1:0: tag#1197 CDB[20]: ba 03:32:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) r5 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x14400) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001980)={{r5}, "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"}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3086.615755][ C1] sd 0:0:1:0: tag#1198 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3086.625658][ C1] sd 0:0:1:0: tag#1198 CDB: opcode=0xe5 (vendor) [ 3086.631983][ C1] sd 0:0:1:0: tag#1198 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3086.641034][ C1] sd 0:0:1:0: tag#1198 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3086.650070][ C1] sd 0:0:1:0: tag#1198 CDB[20]: ba [ 3087.328778][ C0] sd 0:0:1:0: tag#1153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3087.338642][ C0] sd 0:0:1:0: tag#1153 CDB: opcode=0xe5 (vendor) [ 3087.345005][ C0] sd 0:0:1:0: tag#1153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3087.354065][ C0] sd 0:0:1:0: tag#1153 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3087.363119][ C0] sd 0:0:1:0: tag#1153 CDB[20]: ba 03:32:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x10a00, 0x1, 0x0, 0x0, 0xfff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0xfffffffffffffff7, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0xffffffff, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e464387498eeed0319615b0fe1c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad00004000000000000"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f00000015c0)="7cafd4665b0e7f80c8ba23fcf6071c40c10be9819da6b23f94fba3be8eb6532800f6ae580f05109ec31a3acdf3012f9aacc593e6ae2e89b6ea9507321213572af81a1ecd83a0617a1ae29bf1558eb53132f6967ee8f91435bd1ff2cc489db45a1cf0a58bb770803d97aec2c62b0b8689553c424f8ef4b0711e4229a8bd18f13a6f325d7db1c30ab73a6285ea34050e32a493865bdd325fb3a3e8e65fc7f7c0da17e0b19874174df30b1d8fbc581c3a0ece218eb34eb217", 0xb7, 0x1, 0x0, 0x2, r3}]) 03:32:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x27, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) r5 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) setsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @local, @empty}, 0xc) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000100)='./bus\x00', 0x18) 03:32:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x20000, 0x82) r5 = syz_open_dev$usbfs(&(0x7f0000000980), 0x0, 0x4080) io_submit(0x0, 0x6, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="79fc059045077a9ab3721661fa0ff93d28f34d2f725c98eee910874c5c34938770d31d0e4177950312326d127403d16429da730b40e14b47c9b4dcf551e91818dbba1aa92c9ee46dd9e9c665f2ef4104b16836bc85e8d2ebf9aa5a4cdb78db35184716faa1fa36148b5b09e2faeeb12bd77caa0a00ddb9af946396c0b9eddb0696a3995152c94d8446d1973bfd15b0de365fdb3ac3c97dccb6dd477cd33732eb7adadf0d1fca36a3155c1f790d6fac65b83b5008067c1162347a7253b136ef2678bf7e615ec0523676b0d86814b4e19f70d090a298ac639a461176789cbec66651688f429cfaf9", 0xe7, 0xffffffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x39b, 0xffffffffffffffff, &(0x7f0000000580)="0bb6cf063d80d055d252ee749decb35a91269abb37779a0d77cbae896e452b15bb443af4ce7eaa9af3e10baed60f1af81d3fc6ee426070858303c1766811e8c8b286cb517c05c18844c3bcffa057a148cf3caa0e28b84e8d4c6797e4bb6442f0e041f9351bb566fbe87dcc0bffb5be1c7a8457e11f207c6381c6532cf653fcd86e6909de9c34ebd0078961347516568cba482ca4e26cf2979af89401e145e2c1f2baeb25ae7267338feb5d8ed582", 0xae, 0x9, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000640)="300fcc689baa9bc4f111bb401aabe8449971f16313320be58d84457480c140bfc848bffaeea06f851f47a539d9bc1c5869546022a945ed6c1c54c8920f79794fc3fb1d9bf459940c9d3b5dc1d1992396e999cd0d3023d100d5e69da885998996a1126bc984aadb9f600098d9796158c16a947c40ea6ab6405b254a75b46203511ebcd74a2dd3be66e3bf6440bc4195cbc3901dcbc1be2f6f83d22b88c2eaf7abb8e50095a7c51a5eebbb5ef230cae6856e53c3ca05942c1081", 0xb9, 0x1, 0x0, 0x6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001980)="92036849572fa09c55104336c3a6ef95744b302f1bcf343595503703e214bedc9e8ddaee212d8e048fa72632c023abc595526aea9ad927f677b47550ac05a60ad16a06f74a074bad7688a93478a613378c04589186cd3f8e1eae20658afbcd3d826d3fe41ca27b13ba58901959957bac4e7cbdb158a3801a8b1e93c6da4f40f619b4e0e957be13aa94c9e6152b1a395eab6ad0f13c3e24f2ea97c7a192bc31e53e183949a6a6c496eda63058338afcde78e05166326a8a33b81180d28755ba10cc6432e443beb7a48696e8484cccb5cc22cc3e3642201204c16769f4e18e8350dfcee44faabb5d0a6c0111a370c93d1b0b6bedec879176db596238bb9926beb9d71a7bda00fc77642b519cf51419b5f9e4921ee9fd290800a3bcbdc83e7af2ad5340e21225002ff05923a897bc41a5c0d1f0bbafa7d039c7642defa2885ca7d369764c5d2efc7176c91fa40c9b25638ab1d4cbb66dbd83faccaac4873b53918c2f0951f07b775fbe8cfb7918b059e74651e931c237e4e95c95e50b3ba1fdff44e726adc14336f9321716a8277d012275a23b5d17014ebffd1ae400486d500f3f3550d742c97a9c3387d76a362e817120062177afea0c8833ba8b921778f0757e4954bf799e5f539cecc66067b86dc81c4d013eae632cdaa66ccba110e98d8442f10d9dc8cb4bc759e8a4ea8fe7ab9e02cd2b5f8dfa3bb51bff3a6ee336882d776a86e5a6eb852d7709b74c85775348a110c66f7c7625757f5f972e56f5af718e41d30cdcbad3f7b1f124de1d95bece8ccb2c8ea102cbf2ec0933cabf02085e22f25413996fe3253ad8d4c84f0918028bdfa4462641a7e71582a84423207e12f58e1a1e23e50e59d80b10e1882e2be806d760386dbfb0adf50fc4fe5b2c6f3686d42bd852f0c5e87904bb18cc5f4cc294965110479a6b2c71e78d66552d230cf3dfa932a71e4dfb3585c31878ef80889c448de25e0f0908bbe1a83df531fbbff38d45059352661f438b4aa5ecadf39cc3fa0606171d1f79dfbb7f8d3bb7f964e1d02dea956c76d76e7052e1cc2a23ec2fadc2ffda06f03eb1f1af467d4c1890dc1a07740633bed2a3c22f92a16e3366a557bbec171076b9e6888989d4da3163140543abb33a2ecafc1648df7b23ab7c945b7f0a4ffdccd8b8195b18bfab190fad5baf7c395c5fd55eed1bd63a893f24698edf419b2be6bf7f9c118f6176c8d1d9a55b7f4622b80c13671f9d583cd578f688ad041c4ded0efc95c8d91f0221d83c47ba735e6deea00718b75bbb9cd23007768fdb8022298d4da6f45da12906202c0ae2ae3f430ce1f6908b99027b90aebec8ab5fa064a147c7df4a4b54cc800db8a5957d5ed66fc895b65ac0ee4e194210ddbe083c773cc3b429978646eaac3783e9a8c8494d175191f564a70a3cd96e071c2d45ece32c73f153709a4e1d3a6221808505c855a323c5885ce574febe3897fd91b75f12bbf28d2e55460b92e3b1b0fa17358a776413a5ace8f14141a24db01544f20edf15d536c8b858c908a7ed6da2f947d59bc426c05d04ebff6b4a1bddd9ba3c7675127bd4995cff0dc3b6b78eef73862d20595ec836e99607b5be69e29f15d7f66b98386caa95759307ae64b9ca9589bef0449f002173e66eded0aea368d65c762a5fdaaa3be3765dc4faf4225b89294b64486366216e4367b92b9100d05009efe72b21649ed4aeb9818d853cd8e7cf45aebe7a52d8c1d2797fb587e418de023c0e8364d759b5b6ed5e849f163cb510f80260b5c7704163e593ac40cdd4faf062b47988381f5cb9d42e48cd4eb04ed46339df61f9b46be989cfa5d7a6af62e315d25d5e046ec6511770bdb1c5dc03240ac531ff7dd7d342f4fe2fa7acb7002e52a9f144ce253a23a93aa5841ddeffd95e85b7844588a98483ecf4d69b30a1d44dc5d9751870a4813818fc2735e44ec06f3548b53d042cfe6e402a5c0f4adc8a96a3d93fe652c0bd703918d26f264ac9122535954fb58a11983e8342bf38d4e4868bc8fdb95c39339288ed7d0953e50fb9d5ffbec7c6111e009de86482029d25553123c7ff77b1cfba2f8b04375b50972ba8f43f88833c2deb8ff9840ee9dc031c33bdbb101bb1e1d49b58f1ce9f8c3d702bae8a7d8eb57153bf8e8b16a61735332190ae5bbbcde28cecb3d84bb0823a336e966f19c3b85f3464dc0795fa10ef390581a7414300c0b60adc5d7c3c2dc0b9849af3155f2fb4a030b2ce8e84e5409c4688e628145d1a2ca035b290547f4a7c6afa833933cc446083a9aca14b23ecbd8bf9a8d7b623f8a2be4f165620356a29f1e89ffe7455187ff6519325c79cadd32b27d5e4924b379051f1da56267f6602fbb67eeccf4301ff1386c9e8b31859a828fa6b5d070d5319402cf1e4b980a9804ab1895bbd47399edca3ca57c4905b85cb50d45824c51fe1b7547754f588ca45ae90ebfee90db88478996da44d324602c3e160ea1ef9cf3599f3b24ea3739bf361d2bddc83011fbfa449fb5aa5fb0267cf0659c5600512354eb4b1e79fd062997b85f6cfcaff359cb87db3a99bb972215f90fa0eed7272e0c2ea19df7dca559df87fd37f021679406b92c1765a3f6ace3de9714cca161c1224cfc80a4494de42fdfc50566a7843add9e102878b44e1fff5f233a296eda172a950f85def1f87259decf25d43a0adc74795f5c6b8044b3c864fed0dc4c66c883da8176f28eca673042aa4acb7d43f36bff99e925654d210f33f85a326f3ed3ca597a4a8e88d77df60ac3ff4078c90400e16c822858dce6f5ac0caf9ff3e80529b03d9afa5840090cd808ed88522335f0c1363c130801f6d1fee763dbea67ef19d4b0893ef16456b38583015742f920eb8dcb3eb2288fa26bc5f8b1916b793a8ad22524f3fb4b5d8668ece1fd77f06b01eb237b385c42594bc43856d819ab96428bdb50ef933e51b159f197e4a1b5d01d946f803bc80e6885ab38fef30e4ea15985c60600298af957dc76600023b69dca0b0e56f2279c700d2ab570b244d052f60b12cb30ac5785095650bf75bf522064eb0e6f36ddf598ca6442e365d0356b8a3a41132f378bdcfd67a644d3c79669d3a0b379b556889edfceb53b90ad101e06b7289f211a1d03c0a7679b8706b5370e65238f0cbd44b02d80883f517ff2e4f8f256de858f0b6bf58f9bf3e4f18bd76a42e29a04c53572bb8a2642124bdb28551e7698a4196831a249ddb4581c0a592786734bcab49bf6d66a4b63823c849d23baac16c6ccc0845d846ba496150566f4b787a16df9b3a80283be7f2e5f760bd0496062d3c4f0ad424a7416e7b3a1f31fe956103414036a8fd768937781a50f7f48c949c765874485b189013f050a48f5e94b6065c05ff7f9bd68dc7051571b7915298853f85134385c97b220a59e9bead135bc86d7de7d8e09074f969cdd6e4f1689063bdc27c510c7ac3314cd743c14a641b6c725d47fab948c62f63598b8b6c03167b3034ab86e94d42bd324e7fdac16ef91536f3a0c62f3e190fa612ddfcc0dfaf281053fae8eecb66c696c5c676e485eb25eca32c3d0f45078304bca1fb1ebb9d518cf3c75c565d4f1cf563f3727fef79c0de13a67659a94102386efc4a2a1d0f1c4923281f19a698bdc5b40858e903cc47f93a3b6205a23fb987e1a2f17324281f9bdf2b0701b7136c1419566dd0685837ae5bbd29c29be50014fa2bbc7d0629511a87ac6e012e8cfe670a2909d3a878b624717e31a7e732a6cb83f851b2b0e3f6ba11dd660e6af665460bc58f6ac8051d4a651acf860a36fcbcc3be127b632255fb5299fc77f90fbf15c7ceb02aea6b4de4a44bd7059c6af31537ecdc1dabc51d0421f3c5c22048c86acd362c3b527339f5f8347e324158660a387ddf8cee2104daae43352c3a357405c8192cada7d21c0769e0a12c1d02c4caec7d6a1bf5b7df9eaa7303b7739344fc6b59dc075557f3ba15e1c448aa1659eef6445ee409e28b61af50b1edd262b26d8cdee39c630ddaf1942500289d9bb0bdf303987d56eb2437affa935cc4e18fd24558471f9cc47473f30be3a966d8372ac69fa85439f299cd3176e1c79ee166c0ba8ca423b1c2d59adaf41213b866afc7b0dd64b39414e4832cb65677613094f722f343ca2cc7c391f59206a1f55cdb5ca7c8ca2570f5426c55393f77c879b236dbf5bca8dd66639631fb9673013187d965bfc33cbe86e2a559eca6f095b05a43b9c64b70d4b1222304a18f9c50e84edddb84c77ed4d8b3be083bba47ad6363c0f4f62bf3e7b68e81c18624c5a0349f41dbac0a943d0a8fdf84bbec1bef4e4e9b0eadc7cf3662293ce6a52c4b7ea2f79e88f6c6e01dd18728659ccb118a6749a76dd105ccde1e187e01767ff006e208c54b899fc24c8b1d2eeb7d14cb8e6431758469e71d697cd8c863ed09d96448e64b73407602bdee51683a506240f983ce9b1d391e98cdfad1ad74a7d08b09a01ad5bd05b6c232cd0cf8c2f90eb8ac762b63d008c66780db0d1fbe8fbcf9b71bb77699146767f24c63a3bdfc93bdb56270f4b31499337da7a49e2a7efcda5dc88eac629772c3d12e81ea42a0fdc4ffff9892036e926bb575aa53238a938e223c7bde3b0b78fc54cb6c34006aaff992b52e59a36bee8f84f12318d8d7c2c57eaa1f277f06718e153db2e11abefe1ed4604966108bd6f5008aef332b5cc18986e3638688ebcb729554674b30ab674d93470dc4d4b432195356c6805ce3ce0c6af17281254d5df4eee2f9c7c237a3b9257be7d0de773646946993870e8ca931cd532f1ef3ef85ddd5481b823b66a47d6ca94551a54f47cc5ab1a86749fe980c575271c5df7c1d277a585b81fd2695a3eebc0ea6b3a0a219cf0dbea01ec222ac545d331f6668861c53a513bd1952eb81da46edfccee134042c67bf56afa1a6fa96ec8c37935b69d3251775d5140b469abbc488493807bb2486a7c95bdf55b3b52aaec7496f6722278099f9d60a7a02f5beb7339ed27fd5a5c3185c61c6060ba5566d12d6226d915f85c65e7852184f8a3f30e1fb1c3bae4ff579d3e3dcb131ff505c3aaf25d4c7957be32f481fd24c5639e0261d4cd35ca023b7776bedbf47b835e124e9489b3306f10715cebb172b7c70cdb26678504045aa7d64ba4de7fd44eec4bcc27de90c735123481842fba8997f1cef3dcbbabebb3fff85012768b122206347ce476b2f659de2d90e0414102374a1fadf96e549fc4592d75df87c169c85f781592f5263eea5ed3baa1d328eb11086d2b8894e85ef982c6d76ab232b4fcac192613d44e4f1f27ed0faa711e19f7d6488aa70b1f336cdf7c4ea7de596503bd699464eeec9eef292a08b55ee0d5f2b5612975235cfa3038db9b765c674b911752dcdb239e6c8f127bb195d5ac4c008c662c5ebbca00f07296488f74ff2ac53cddd44928fff807d76641584d97530ffe8ee3d1eb83f7d0b253753d3b3606f93b5bf6228c5cfb06b8feb77d59db9da6d643bc854372bb7f71520eea67eddaa2790f5316deadf56825c5e7f794b05d2a4382bcd4e53de0dfd4057747404842e7ce3a27729972d530fa64ab5ad8fb545692e281b827a8483bb646236f2d3217a15e623202df3d937df3e5999949b363c176dc760d16599f75838744a36c7645c043fa4c6a70e2b5b38b3aea9dd4fa098f80f1237b084113ea39be519f93f1e39f2ef2a67268ed96e8f2978c2111288850c497c4de6f10899fbb133bf4e779a62bc5f757800d9522248164bd20951474f00ff72fbaee63e132fb17d6aba04545aad94fef621548fc6267dff", 0x1000, 0x761}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000880)="184b583593e55913ea944131fbd500d0e4b105e6a626d007eec5ad3ffc2ce88c0988cac9234a0475c33ad06af441935cdab1874548e5a58b58d24d2e60ad49e1ffa65810393d9644e941d2ec3e32e1d4c7d33eaa4d0c475ebefaad251ff621d15489e1439f243b287df0196662db94dc362f32777021b3f41b0d198907d2e0b057ce1bd0a8a99e7391ebd72437366c851d6f7a138e9fccbd7be88817", 0x9c, 0x802, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8c, r5, &(0x7f00000009c0)="049f4ef03e484374820e41d481aac7c20f3835b479bbc053aa6b95db5795d5e58eddd3", 0x23, 0x3, 0x0, 0x3}]) 03:32:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000063480)={0x4, [], 0x7f, "2974099cabe110"}) syz_open_dev$sg(0x0, 0x102, 0x0) r1 = creat(0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xfffffffffffffc01, 0x1}, &(0x7f00000001c0)) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10d, 0x9, 0x6, 0x0, 0x410, 0x4a4, 0x5}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000080)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) [ 3089.393920][ C0] sd 0:0:1:0: tag#1251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3089.404210][ C0] sd 0:0:1:0: tag#1251 CDB: opcode=0xe5 (vendor) [ 3089.410540][ C0] sd 0:0:1:0: tag#1251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3089.419605][ C0] sd 0:0:1:0: tag#1251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3089.428647][ C0] sd 0:0:1:0: tag#1251 CDB[20]: ba [ 3089.483989][ C0] sd 0:0:1:0: tag#1152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3089.493847][ C0] sd 0:0:1:0: tag#1152 CDB: opcode=0xe5 (vendor) [ 3089.500186][ C0] sd 0:0:1:0: tag#1152 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3089.509227][ C0] sd 0:0:1:0: tag#1152 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3089.518261][ C0] sd 0:0:1:0: tag#1152 CDB[20]: ba 03:32:13 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000063480)={0x4, [], 0x7f, "2974099cabe110"}) syz_open_dev$sg(0x0, 0x102, 0x0) r1 = creat(0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xfffffffffffffc01, 0x1}, &(0x7f00000001c0)) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10d, 0x9, 0x6, 0x0, 0x410, 0x4a4, 0x5}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000080)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000063480)={0x4, [], 0x7f, "2974099cabe110"}) (async) syz_open_dev$sg(0x0, 0x102, 0x0) (async) creat(0x0, 0x0) (async) gettid() (async) rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) (async) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xfffffffffffffc01, 0x1}, &(0x7f00000001c0)) (async) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10d, 0x9, 0x6, 0x0, 0x410, 0x4a4, 0x5}, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r5, 0x0, &(0x7f0000000540)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000080)) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) (async) 03:32:15 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000063480)={0x4, [], 0x7f, "2974099cabe110"}) syz_open_dev$sg(0x0, 0x102, 0x0) (async) r1 = creat(0x0, 0x0) (async) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xfffffffffffffc01, 0x1}, &(0x7f00000001c0)) (async) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10d, 0x9, 0x6, 0x0, 0x410, 0x4a4, 0x5}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000080)) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) 03:32:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x1) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) [ 3093.616488][ C0] sd 0:0:1:0: tag#1281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3093.626350][ C0] sd 0:0:1:0: tag#1281 CDB: opcode=0xe5 (vendor) [ 3093.632721][ C0] sd 0:0:1:0: tag#1281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3093.641740][ C0] sd 0:0:1:0: tag#1281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3093.650787][ C0] sd 0:0:1:0: tag#1281 CDB[20]: ba 03:32:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x10a00, 0x1, 0x0, 0x0, 0xfff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0xfffffffffffffff7, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0xffffffff, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=ANY=[], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e464387498eeed0319615b0fe1c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad00004000000000000"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f00000015c0)="7cafd4665b0e7f80c8ba23fcf6071c40c10be9819da6b23f94fba3be8eb6532800f6ae580f05109ec31a3acdf3012f9aacc593e6ae2e89b6ea9507321213572af81a1ecd83a0617a1ae29bf1558eb53132f6967ee8f91435bd1ff2cc489db45a1cf0a58bb770803d97aec2c62b0b8689553c424f8ef4b0711e4229a8bd18f13a6f325d7db1c30ab73a6285ea34050e32a493865bdd325fb3a3e8e65fc7f7c0da17e0b19874174df30b1d8fbc581c3a0ece218eb34eb217", 0xb7, 0x1, 0x0, 0x2, r3}]) 03:32:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0xfffffffffffffffd, 0x0, 0x4, 0x2]}, {0x4, @struct={0x1}, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x3f, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001440)={0x0, 0x2, 0xa8bf}) 03:32:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x20000, 0x82) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000980), 0x0, 0x4080) io_submit(0x0, 0x6, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="79fc059045077a9ab3721661fa0ff93d28f34d2f725c98eee910874c5c34938770d31d0e4177950312326d127403d16429da730b40e14b47c9b4dcf551e91818dbba1aa92c9ee46dd9e9c665f2ef4104b16836bc85e8d2ebf9aa5a4cdb78db35184716faa1fa36148b5b09e2faeeb12bd77caa0a00ddb9af946396c0b9eddb0696a3995152c94d8446d1973bfd15b0de365fdb3ac3c97dccb6dd477cd33732eb7adadf0d1fca36a3155c1f790d6fac65b83b5008067c1162347a7253b136ef2678bf7e615ec0523676b0d86814b4e19f70d090a298ac639a461176789cbec66651688f429cfaf9", 0xe7, 0xffffffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x39b, 0xffffffffffffffff, &(0x7f0000000580)="0bb6cf063d80d055d252ee749decb35a91269abb37779a0d77cbae896e452b15bb443af4ce7eaa9af3e10baed60f1af81d3fc6ee426070858303c1766811e8c8b286cb517c05c18844c3bcffa057a148cf3caa0e28b84e8d4c6797e4bb6442f0e041f9351bb566fbe87dcc0bffb5be1c7a8457e11f207c6381c6532cf653fcd86e6909de9c34ebd0078961347516568cba482ca4e26cf2979af89401e145e2c1f2baeb25ae7267338feb5d8ed582", 0xae, 0x9, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000640)="300fcc689baa9bc4f111bb401aabe8449971f16313320be58d84457480c140bfc848bffaeea06f851f47a539d9bc1c5869546022a945ed6c1c54c8920f79794fc3fb1d9bf459940c9d3b5dc1d1992396e999cd0d3023d100d5e69da885998996a1126bc984aadb9f600098d9796158c16a947c40ea6ab6405b254a75b46203511ebcd74a2dd3be66e3bf6440bc4195cbc3901dcbc1be2f6f83d22b88c2eaf7abb8e50095a7c51a5eebbb5ef230cae6856e53c3ca05942c1081", 0xb9, 0x1, 0x0, 0x6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001980)="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", 0x1000, 0x761}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000880)="184b583593e55913ea944131fbd500d0e4b105e6a626d007eec5ad3ffc2ce88c0988cac9234a0475c33ad06af441935cdab1874548e5a58b58d24d2e60ad49e1ffa65810393d9644e941d2ec3e32e1d4c7d33eaa4d0c475ebefaad251ff621d15489e1439f243b287df0196662db94dc362f32777021b3f41b0d198907d2e0b057ce1bd0a8a99e7391ebd72437366c851d6f7a138e9fccbd7be88817", 0x9c, 0x802, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8c, r5, &(0x7f00000009c0)="049f4ef03e484374820e41d481aac7c20f3835b479bbc053aa6b95db5795d5e58eddd3", 0x23, 0x3, 0x0, 0x3}]) 03:32:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/17], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3093.830123][ C0] sd 0:0:1:0: tag#1286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3093.840008][ C0] sd 0:0:1:0: tag#1286 CDB: opcode=0xe5 (vendor) [ 3093.846368][ C0] sd 0:0:1:0: tag#1286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3093.855418][ C0] sd 0:0:1:0: tag#1286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3093.864498][ C0] sd 0:0:1:0: tag#1286 CDB[20]: ba [ 3093.879776][ C1] sd 0:0:1:0: tag#1287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3093.889642][ C1] sd 0:0:1:0: tag#1287 CDB: opcode=0xe5 (vendor) [ 3093.895990][ C1] sd 0:0:1:0: tag#1287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3093.905025][ C1] sd 0:0:1:0: tag#1287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3093.914065][ C1] sd 0:0:1:0: tag#1287 CDB[20]: ba 03:32:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async, rerun: 64) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x20000, 0x82) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000980), 0x0, 0x4080) io_submit(0x0, 0x6, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="79fc059045077a9ab3721661fa0ff93d28f34d2f725c98eee910874c5c34938770d31d0e4177950312326d127403d16429da730b40e14b47c9b4dcf551e91818dbba1aa92c9ee46dd9e9c665f2ef4104b16836bc85e8d2ebf9aa5a4cdb78db35184716faa1fa36148b5b09e2faeeb12bd77caa0a00ddb9af946396c0b9eddb0696a3995152c94d8446d1973bfd15b0de365fdb3ac3c97dccb6dd477cd33732eb7adadf0d1fca36a3155c1f790d6fac65b83b5008067c1162347a7253b136ef2678bf7e615ec0523676b0d86814b4e19f70d090a298ac639a461176789cbec66651688f429cfaf9", 0xe7, 0xffffffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x39b, 0xffffffffffffffff, &(0x7f0000000580)="0bb6cf063d80d055d252ee749decb35a91269abb37779a0d77cbae896e452b15bb443af4ce7eaa9af3e10baed60f1af81d3fc6ee426070858303c1766811e8c8b286cb517c05c18844c3bcffa057a148cf3caa0e28b84e8d4c6797e4bb6442f0e041f9351bb566fbe87dcc0bffb5be1c7a8457e11f207c6381c6532cf653fcd86e6909de9c34ebd0078961347516568cba482ca4e26cf2979af89401e145e2c1f2baeb25ae7267338feb5d8ed582", 0xae, 0x9, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000640)="300fcc689baa9bc4f111bb401aabe8449971f16313320be58d84457480c140bfc848bffaeea06f851f47a539d9bc1c5869546022a945ed6c1c54c8920f79794fc3fb1d9bf459940c9d3b5dc1d1992396e999cd0d3023d100d5e69da885998996a1126bc984aadb9f600098d9796158c16a947c40ea6ab6405b254a75b46203511ebcd74a2dd3be66e3bf6440bc4195cbc3901dcbc1be2f6f83d22b88c2eaf7abb8e50095a7c51a5eebbb5ef230cae6856e53c3ca05942c1081", 0xb9, 0x1, 0x0, 0x6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001980)="92036849572fa09c55104336c3a6ef95744b302f1bcf343595503703e214bedc9e8ddaee212d8e048fa72632c023abc595526aea9ad927f677b47550ac05a60ad16a06f74a074bad7688a93478a613378c04589186cd3f8e1eae20658afbcd3d826d3fe41ca27b13ba58901959957bac4e7cbdb158a3801a8b1e93c6da4f40f619b4e0e957be13aa94c9e6152b1a395eab6ad0f13c3e24f2ea97c7a192bc31e53e183949a6a6c496eda63058338afcde78e05166326a8a33b81180d28755ba10cc6432e443beb7a48696e8484cccb5cc22cc3e3642201204c16769f4e18e8350dfcee44faabb5d0a6c0111a370c93d1b0b6bedec879176db596238bb9926beb9d71a7bda00fc77642b519cf51419b5f9e4921ee9fd290800a3bcbdc83e7af2ad5340e21225002ff05923a897bc41a5c0d1f0bbafa7d039c7642defa2885ca7d369764c5d2efc7176c91fa40c9b25638ab1d4cbb66dbd83faccaac4873b53918c2f0951f07b775fbe8cfb7918b059e74651e931c237e4e95c95e50b3ba1fdff44e726adc14336f9321716a8277d012275a23b5d17014ebffd1ae400486d500f3f3550d742c97a9c3387d76a362e817120062177afea0c8833ba8b921778f0757e4954bf799e5f539cecc66067b86dc81c4d013eae632cdaa66ccba110e98d8442f10d9dc8cb4bc759e8a4ea8fe7ab9e02cd2b5f8dfa3bb51bff3a6ee336882d776a86e5a6eb852d7709b74c85775348a110c66f7c7625757f5f972e56f5af718e41d30cdcbad3f7b1f124de1d95bece8ccb2c8ea102cbf2ec0933cabf02085e22f25413996fe3253ad8d4c84f0918028bdfa4462641a7e71582a84423207e12f58e1a1e23e50e59d80b10e1882e2be806d760386dbfb0adf50fc4fe5b2c6f3686d42bd852f0c5e87904bb18cc5f4cc294965110479a6b2c71e78d66552d230cf3dfa932a71e4dfb3585c31878ef80889c448de25e0f0908bbe1a83df531fbbff38d45059352661f438b4aa5ecadf39cc3fa0606171d1f79dfbb7f8d3bb7f964e1d02dea956c76d76e7052e1cc2a23ec2fadc2ffda06f03eb1f1af467d4c1890dc1a07740633bed2a3c22f92a16e3366a557bbec171076b9e6888989d4da3163140543abb33a2ecafc1648df7b23ab7c945b7f0a4ffdccd8b8195b18bfab190fad5baf7c395c5fd55eed1bd63a893f24698edf419b2be6bf7f9c118f6176c8d1d9a55b7f4622b80c13671f9d583cd578f688ad041c4ded0efc95c8d91f0221d83c47ba735e6deea00718b75bbb9cd23007768fdb8022298d4da6f45da12906202c0ae2ae3f430ce1f6908b99027b90aebec8ab5fa064a147c7df4a4b54cc800db8a5957d5ed66fc895b65ac0ee4e194210ddbe083c773cc3b429978646eaac3783e9a8c8494d175191f564a70a3cd96e071c2d45ece32c73f153709a4e1d3a6221808505c855a323c5885ce574febe3897fd91b75f12bbf28d2e55460b92e3b1b0fa17358a776413a5ace8f14141a24db01544f20edf15d536c8b858c908a7ed6da2f947d59bc426c05d04ebff6b4a1bddd9ba3c7675127bd4995cff0dc3b6b78eef73862d20595ec836e99607b5be69e29f15d7f66b98386caa95759307ae64b9ca9589bef0449f002173e66eded0aea368d65c762a5fdaaa3be3765dc4faf4225b89294b64486366216e4367b92b9100d05009efe72b21649ed4aeb9818d853cd8e7cf45aebe7a52d8c1d2797fb587e418de023c0e8364d759b5b6ed5e849f163cb510f80260b5c7704163e593ac40cdd4faf062b47988381f5cb9d42e48cd4eb04ed46339df61f9b46be989cfa5d7a6af62e315d25d5e046ec6511770bdb1c5dc03240ac531ff7dd7d342f4fe2fa7acb7002e52a9f144ce253a23a93aa5841ddeffd95e85b7844588a98483ecf4d69b30a1d44dc5d9751870a4813818fc2735e44ec06f3548b53d042cfe6e402a5c0f4adc8a96a3d93fe652c0bd703918d26f264ac9122535954fb58a11983e8342bf38d4e4868bc8fdb95c39339288ed7d0953e50fb9d5ffbec7c6111e009de86482029d25553123c7ff77b1cfba2f8b04375b50972ba8f43f88833c2deb8ff9840ee9dc031c33bdbb101bb1e1d49b58f1ce9f8c3d702bae8a7d8eb57153bf8e8b16a61735332190ae5bbbcde28cecb3d84bb0823a336e966f19c3b85f3464dc0795fa10ef390581a7414300c0b60adc5d7c3c2dc0b9849af3155f2fb4a030b2ce8e84e5409c4688e628145d1a2ca035b290547f4a7c6afa833933cc446083a9aca14b23ecbd8bf9a8d7b623f8a2be4f165620356a29f1e89ffe7455187ff6519325c79cadd32b27d5e4924b379051f1da56267f6602fbb67eeccf4301ff1386c9e8b31859a828fa6b5d070d5319402cf1e4b980a9804ab1895bbd47399edca3ca57c4905b85cb50d45824c51fe1b7547754f588ca45ae90ebfee90db88478996da44d324602c3e160ea1ef9cf3599f3b24ea3739bf361d2bddc83011fbfa449fb5aa5fb0267cf0659c5600512354eb4b1e79fd062997b85f6cfcaff359cb87db3a99bb972215f90fa0eed7272e0c2ea19df7dca559df87fd37f021679406b92c1765a3f6ace3de9714cca161c1224cfc80a4494de42fdfc50566a7843add9e102878b44e1fff5f233a296eda172a950f85def1f87259decf25d43a0adc74795f5c6b8044b3c864fed0dc4c66c883da8176f28eca673042aa4acb7d43f36bff99e925654d210f33f85a326f3ed3ca597a4a8e88d77df60ac3ff4078c90400e16c822858dce6f5ac0caf9ff3e80529b03d9afa5840090cd808ed88522335f0c1363c130801f6d1fee763dbea67ef19d4b0893ef16456b38583015742f920eb8dcb3eb2288fa26bc5f8b1916b793a8ad22524f3fb4b5d8668ece1fd77f06b01eb237b385c42594bc43856d819ab96428bdb50ef933e51b159f197e4a1b5d01d946f803bc80e6885ab38fef30e4ea15985c60600298af957dc76600023b69dca0b0e56f2279c700d2ab570b244d052f60b12cb30ac5785095650bf75bf522064eb0e6f36ddf598ca6442e365d0356b8a3a41132f378bdcfd67a644d3c79669d3a0b379b556889edfceb53b90ad101e06b7289f211a1d03c0a7679b8706b5370e65238f0cbd44b02d80883f517ff2e4f8f256de858f0b6bf58f9bf3e4f18bd76a42e29a04c53572bb8a2642124bdb28551e7698a4196831a249ddb4581c0a592786734bcab49bf6d66a4b63823c849d23baac16c6ccc0845d846ba496150566f4b787a16df9b3a80283be7f2e5f760bd0496062d3c4f0ad424a7416e7b3a1f31fe956103414036a8fd768937781a50f7f48c949c765874485b189013f050a48f5e94b6065c05ff7f9bd68dc7051571b7915298853f85134385c97b220a59e9bead135bc86d7de7d8e09074f969cdd6e4f1689063bdc27c510c7ac3314cd743c14a641b6c725d47fab948c62f63598b8b6c03167b3034ab86e94d42bd324e7fdac16ef91536f3a0c62f3e190fa612ddfcc0dfaf281053fae8eecb66c696c5c676e485eb25eca32c3d0f45078304bca1fb1ebb9d518cf3c75c565d4f1cf563f3727fef79c0de13a67659a94102386efc4a2a1d0f1c4923281f19a698bdc5b40858e903cc47f93a3b6205a23fb987e1a2f17324281f9bdf2b0701b7136c1419566dd0685837ae5bbd29c29be50014fa2bbc7d0629511a87ac6e012e8cfe670a2909d3a878b624717e31a7e732a6cb83f851b2b0e3f6ba11dd660e6af665460bc58f6ac8051d4a651acf860a36fcbcc3be127b632255fb5299fc77f90fbf15c7ceb02aea6b4de4a44bd7059c6af31537ecdc1dabc51d0421f3c5c22048c86acd362c3b527339f5f8347e324158660a387ddf8cee2104daae43352c3a357405c8192cada7d21c0769e0a12c1d02c4caec7d6a1bf5b7df9eaa7303b7739344fc6b59dc075557f3ba15e1c448aa1659eef6445ee409e28b61af50b1edd262b26d8cdee39c630ddaf1942500289d9bb0bdf303987d56eb2437affa935cc4e18fd24558471f9cc47473f30be3a966d8372ac69fa85439f299cd3176e1c79ee166c0ba8ca423b1c2d59adaf41213b866afc7b0dd64b39414e4832cb65677613094f722f343ca2cc7c391f59206a1f55cdb5ca7c8ca2570f5426c55393f77c879b236dbf5bca8dd66639631fb9673013187d965bfc33cbe86e2a559eca6f095b05a43b9c64b70d4b1222304a18f9c50e84edddb84c77ed4d8b3be083bba47ad6363c0f4f62bf3e7b68e81c18624c5a0349f41dbac0a943d0a8fdf84bbec1bef4e4e9b0eadc7cf3662293ce6a52c4b7ea2f79e88f6c6e01dd18728659ccb118a6749a76dd105ccde1e187e01767ff006e208c54b899fc24c8b1d2eeb7d14cb8e6431758469e71d697cd8c863ed09d96448e64b73407602bdee51683a506240f983ce9b1d391e98cdfad1ad74a7d08b09a01ad5bd05b6c232cd0cf8c2f90eb8ac762b63d008c66780db0d1fbe8fbcf9b71bb77699146767f24c63a3bdfc93bdb56270f4b31499337da7a49e2a7efcda5dc88eac629772c3d12e81ea42a0fdc4ffff9892036e926bb575aa53238a938e223c7bde3b0b78fc54cb6c34006aaff992b52e59a36bee8f84f12318d8d7c2c57eaa1f277f06718e153db2e11abefe1ed4604966108bd6f5008aef332b5cc18986e3638688ebcb729554674b30ab674d93470dc4d4b432195356c6805ce3ce0c6af17281254d5df4eee2f9c7c237a3b9257be7d0de773646946993870e8ca931cd532f1ef3ef85ddd5481b823b66a47d6ca94551a54f47cc5ab1a86749fe980c575271c5df7c1d277a585b81fd2695a3eebc0ea6b3a0a219cf0dbea01ec222ac545d331f6668861c53a513bd1952eb81da46edfccee134042c67bf56afa1a6fa96ec8c37935b69d3251775d5140b469abbc488493807bb2486a7c95bdf55b3b52aaec7496f6722278099f9d60a7a02f5beb7339ed27fd5a5c3185c61c6060ba5566d12d6226d915f85c65e7852184f8a3f30e1fb1c3bae4ff579d3e3dcb131ff505c3aaf25d4c7957be32f481fd24c5639e0261d4cd35ca023b7776bedbf47b835e124e9489b3306f10715cebb172b7c70cdb26678504045aa7d64ba4de7fd44eec4bcc27de90c735123481842fba8997f1cef3dcbbabebb3fff85012768b122206347ce476b2f659de2d90e0414102374a1fadf96e549fc4592d75df87c169c85f781592f5263eea5ed3baa1d328eb11086d2b8894e85ef982c6d76ab232b4fcac192613d44e4f1f27ed0faa711e19f7d6488aa70b1f336cdf7c4ea7de596503bd699464eeec9eef292a08b55ee0d5f2b5612975235cfa3038db9b765c674b911752dcdb239e6c8f127bb195d5ac4c008c662c5ebbca00f07296488f74ff2ac53cddd44928fff807d76641584d97530ffe8ee3d1eb83f7d0b253753d3b3606f93b5bf6228c5cfb06b8feb77d59db9da6d643bc854372bb7f71520eea67eddaa2790f5316deadf56825c5e7f794b05d2a4382bcd4e53de0dfd4057747404842e7ce3a27729972d530fa64ab5ad8fb545692e281b827a8483bb646236f2d3217a15e623202df3d937df3e5999949b363c176dc760d16599f75838744a36c7645c043fa4c6a70e2b5b38b3aea9dd4fa098f80f1237b084113ea39be519f93f1e39f2ef2a67268ed96e8f2978c2111288850c497c4de6f10899fbb133bf4e779a62bc5f757800d9522248164bd20951474f00ff72fbaee63e132fb17d6aba04545aad94fef621548fc6267dff", 0x1000, 0x761}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000880)="184b583593e55913ea944131fbd500d0e4b105e6a626d007eec5ad3ffc2ce88c0988cac9234a0475c33ad06af441935cdab1874548e5a58b58d24d2e60ad49e1ffa65810393d9644e941d2ec3e32e1d4c7d33eaa4d0c475ebefaad251ff621d15489e1439f243b287df0196662db94dc362f32777021b3f41b0d198907d2e0b057ce1bd0a8a99e7391ebd72437366c851d6f7a138e9fccbd7be88817", 0x9c, 0x802, 0x0, 0x3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8c, r5, &(0x7f00000009c0)="049f4ef03e484374820e41d481aac7c20f3835b479bbc053aa6b95db5795d5e58eddd3", 0x23, 0x3, 0x0, 0x3}]) [ 3095.464894][ C1] sd 0:0:1:0: tag#1296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3095.474767][ C1] sd 0:0:1:0: tag#1296 CDB: opcode=0xe5 (vendor) [ 3095.481108][ C1] sd 0:0:1:0: tag#1296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3095.490181][ C1] sd 0:0:1:0: tag#1296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3095.499314][ C1] sd 0:0:1:0: tag#1296 CDB[20]: ba 03:32:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xff}}, './bus\x00'}) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000240)=""/42, 0x2a}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="15c3cf8b"], 0x150}, 0x100) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r4, 0x10, &(0x7f0000000700)={&(0x7f0000000480)=""/157, 0x9d}}, 0x10) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) setrlimit(0xf, &(0x7f0000000100)={0x3fff800000000000, 0x101}) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xff}}, './bus\x00'}) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000240)=""/42, 0x2a}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="15c3cf8b"], 0x150}, 0x100) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r4, 0x10, &(0x7f0000000700)={&(0x7f0000000480)=""/157, 0x9d}}, 0x10) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xff}}, './bus\x00'}) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000240)=""/42, 0x2a}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="15c3cf8b"], 0x150}, 0x100) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r4, 0x10, &(0x7f0000000700)={&(0x7f0000000480)=""/157, 0x9d}}, 0x10) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:32:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001540)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3000088b13162c6dfbe865a104dbcaecbe05dad7e1ae4771a0659184bcfb296d2328ea94e1a1510ec5cc53b29aa134ef21a898dc4ab5c87409cd813296d8512f02b8a743ef147d2f691201393a73dec70d878b0eb21"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) read$usbmon(r2, &(0x7f0000000040)=""/40, 0x28) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3098.586693][ C0] sd 0:0:1:0: tag#1307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3098.596588][ C0] sd 0:0:1:0: tag#1307 CDB: opcode=0xe5 (vendor) [ 3098.602940][ C0] sd 0:0:1:0: tag#1307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3098.611963][ C0] sd 0:0:1:0: tag#1307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3098.621000][ C0] sd 0:0:1:0: tag#1307 CDB[20]: ba 03:32:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0xfffffffffffffffd, 0x0, 0x4, 0x2]}, {0x4, @struct={0x1}, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x3f, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001440)={0x0, 0x2, 0xa8bf}) 03:32:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) r1 = creat(0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xff}}, './bus\x00'}) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000240)=""/42, 0x2a}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="15c3cf8b"], 0x150}, 0x100) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r4, 0x10, &(0x7f0000000700)={&(0x7f0000000480)=""/157, 0x9d}}, 0x10) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/17], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) setrlimit(0xf, &(0x7f0000000100)={0x3fff800000000000, 0x101}) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) setrlimit(0xf, &(0x7f0000000100)={0x3fff800000000000, 0x101}) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:32:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3100.373160][ C1] sd 0:0:1:0: tag#1282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3100.383026][ C1] sd 0:0:1:0: tag#1282 CDB: opcode=0xe5 (vendor) [ 3100.389352][ C1] sd 0:0:1:0: tag#1282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3100.398406][ C1] sd 0:0:1:0: tag#1282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3100.407451][ C1] sd 0:0:1:0: tag#1282 CDB[20]: ba 03:32:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/17], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3102.234012][ C1] sd 0:0:1:0: tag#1285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3102.243933][ C1] sd 0:0:1:0: tag#1285 CDB: opcode=0xe5 (vendor) [ 3102.250291][ C1] sd 0:0:1:0: tag#1285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3102.259415][ C1] sd 0:0:1:0: tag#1285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3102.268513][ C1] sd 0:0:1:0: tag#1285 CDB[20]: ba 03:32:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0x1, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff80) 03:32:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0xfffffffffffffffd, 0x0, 0x4, 0x2]}, {0x4, @struct={0x1}, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x3f, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001440)={0x0, 0x2, 0xa8bf}) 03:32:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 32) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 32) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) setrlimit(0xf, &(0x7f0000000100)={0x3fff800000000000, 0x101}) (async, rerun: 64) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async, rerun: 64) creat(&(0x7f0000000740)='./bus\x00', 0x0) (rerun: 64) 03:32:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001540)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3000088b13162c6dfbe865a104dbcaecbe05dad7e1ae4771a0659184bcfb296d2328ea94e1a1510ec5cc53b29aa134ef21a898dc4ab5c87409cd813296d8512f02b8a743ef147d2f691201393a73dec70d878b0eb21"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) read$usbmon(r2, &(0x7f0000000040)=""/40, 0x28) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3103.077238][ C1] sd 0:0:1:0: tag#1283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3103.087114][ C1] sd 0:0:1:0: tag#1283 CDB: opcode=0xe5 (vendor) [ 3103.093471][ C1] sd 0:0:1:0: tag#1283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3103.102540][ C1] sd 0:0:1:0: tag#1283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3103.111558][ C1] sd 0:0:1:0: tag#1283 CDB[20]: ba 03:32:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0x1, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0x1, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r2, r2, 0x0, 0x8080ffffff80) (async) 03:32:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28041) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x1, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x80000000000001, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x6ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3103.223700][ C1] sd 0:0:1:0: tag#1291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3103.233583][ C1] sd 0:0:1:0: tag#1291 CDB: opcode=0xe5 (vendor) [ 3103.239923][ C1] sd 0:0:1:0: tag#1291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3103.249003][ C1] sd 0:0:1:0: tag#1291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3103.258075][ C1] sd 0:0:1:0: tag#1291 CDB[20]: ba 03:32:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000580)=""/195, 0xc3}], 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3103.426662][ C1] sd 0:0:1:0: tag#1292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3103.436545][ C1] sd 0:0:1:0: tag#1292 CDB: opcode=0xe5 (vendor) [ 3103.442914][ C1] sd 0:0:1:0: tag#1292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3103.451933][ C1] sd 0:0:1:0: tag#1292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3103.460984][ C1] sd 0:0:1:0: tag#1292 CDB[20]: ba [ 3103.472860][ C1] sd 0:0:1:0: tag#1294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3103.482730][ C1] sd 0:0:1:0: tag#1294 CDB: opcode=0xe5 (vendor) [ 3103.489055][ C1] sd 0:0:1:0: tag#1294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3103.498112][ C1] sd 0:0:1:0: tag#1294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3103.507153][ C1] sd 0:0:1:0: tag#1294 CDB[20]: ba [ 3103.512853][ C1] sd 0:0:1:0: tag#1295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3103.522712][ C1] sd 0:0:1:0: tag#1295 CDB: opcode=0xe5 (vendor) [ 3103.529055][ C1] sd 0:0:1:0: tag#1295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3103.538168][ C1] sd 0:0:1:0: tag#1295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3103.547212][ C1] sd 0:0:1:0: tag#1295 CDB[20]: ba [ 3105.322730][ C1] sd 0:0:1:0: tag#1297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3105.332600][ C1] sd 0:0:1:0: tag#1297 CDB: opcode=0xe5 (vendor) [ 3105.338928][ C1] sd 0:0:1:0: tag#1297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3105.348129][ C1] sd 0:0:1:0: tag#1297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3105.357384][ C1] sd 0:0:1:0: tag#1297 CDB[20]: ba 03:32:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28041) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x1, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x80000000000001, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x6ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28041) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x1, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x80000000000001, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x6ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:32:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000580)=""/195, 0xc3}], 0x2) (async, rerun: 32) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0x1, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (rerun: 32) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r2, r2, 0x0, 0x8080ffffff80) 03:32:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3105.898539][ C1] sd 0:0:1:0: tag#1289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3105.908421][ C1] sd 0:0:1:0: tag#1289 CDB: opcode=0xe5 (vendor) [ 3105.914808][ C1] sd 0:0:1:0: tag#1289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3105.923879][ C1] sd 0:0:1:0: tag#1289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3105.932947][ C1] sd 0:0:1:0: tag#1289 CDB[20]: ba [ 3106.013111][ C0] sd 0:0:1:0: tag#1358 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3106.022974][ C0] sd 0:0:1:0: tag#1358 CDB: opcode=0xe5 (vendor) [ 3106.029319][ C0] sd 0:0:1:0: tag#1358 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3106.038373][ C0] sd 0:0:1:0: tag#1358 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3106.047423][ C0] sd 0:0:1:0: tag#1358 CDB[20]: ba 03:32:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 64) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001540)=ANY=[@ANYBLOB="9000000024000000070000000800000000000000800000b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3000088b13162c6dfbe865a104dbcaecbe05dad7e1ae4771a0659184bcfb296d2328ea94e1a1510ec5cc53b29aa134ef21a898dc4ab5c87409cd813296d8512f02b8a743ef147d2f691201393a73dec70d878b0eb21"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (rerun: 32) read$usbmon(r2, &(0x7f0000000040)=""/40, 0x28) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28041) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x1, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x80000000000001, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x6ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28041) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x1, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x80000000000001, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x6ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3106.161945][ C0] sd 0:0:1:0: tag#1291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3106.171804][ C0] sd 0:0:1:0: tag#1291 CDB: opcode=0xe5 (vendor) [ 3106.178158][ C0] sd 0:0:1:0: tag#1291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3106.187208][ C0] sd 0:0:1:0: tag#1291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3106.196267][ C0] sd 0:0:1:0: tag#1291 CDB[20]: ba 03:32:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001440)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x6, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0xffe, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$IPSET_CMD_HEADER(r7, 0x0, 0x404c000) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:31 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000ec0)={0x38, 0x5, 0x28, 0x9, 0x2, 0x97, 0x401, 0x752, 0x1f0000, 0x7fff}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000f00)={0x38, 0x6, 0x4, 0x2, 0x1, 0xfffffffffffffffd, 0x7fff, 0x7fff, 0x55, 0x81}, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) sendfile(r0, r0, 0x0, 0x8080ffffff80) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) recvmmsg$unix(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/78, 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="b00500010e0014000000e60000000000000000002404265943575b0466d30d4a02b85266dd666f68e20ade06b4177863b55a760d792c6fc9c49bf8159ebcdbc2de242ab25df5662d0114d8485e72b2e02a18df5feba7306bdd175e936e9f875fdebfa012e34ef723d21aad869b642e0aaeefed3323748be5a8c1484fd704944c1fa2a0b2eb4f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001315ac59000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/128, 0x80}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x7, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x2041, &(0x7f0000000e00)={0x0, 0x3938700}) [ 3108.336713][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 3108.336753][ C1] sd 0:0:1:0: tag#1298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3108.353203][ C1] sd 0:0:1:0: tag#1298 CDB: opcode=0xe5 (vendor) [ 3108.359536][ C1] sd 0:0:1:0: tag#1298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3108.368585][ C1] sd 0:0:1:0: tag#1298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3108.377639][ C1] sd 0:0:1:0: tag#1298 CDB[20]: ba 03:32:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = gettid() sched_setattr(r0, &(0x7f0000000080)={0xfffffffffffffff7, 0x6, 0xd6d15556843daac0, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="521b49e0431bf14b07819abd500000000000000000000000000000001cec00"], 0x30}}, 0x4048010) creat(&(0x7f0000000040)='./bus\x00', 0x1a) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f0000000580)=""/195, 0xc3}], 0x2) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3110.327432][ C1] sd 0:0:1:0: tag#1300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.337317][ C1] sd 0:0:1:0: tag#1300 CDB: opcode=0xe5 (vendor) [ 3110.343676][ C1] sd 0:0:1:0: tag#1300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.352761][ C1] sd 0:0:1:0: tag#1300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3110.361781][ C1] sd 0:0:1:0: tag#1300 CDB[20]: ba 03:32:33 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) r1 = creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000ec0)={0x38, 0x5, 0x28, 0x9, 0x2, 0x97, 0x401, 0x752, 0x1f0000, 0x7fff}, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000f00)={0x38, 0x6, 0x4, 0x2, 0x1, 0xfffffffffffffffd, 0x7fff, 0x7fff, 0x55, 0x81}, 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async) recvmmsg$unix(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/78, 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="b00500010e0014000000e60000000000000000002404265943575b0466d30d4a02b85266dd666f68e20ade06b4177863b55a760d792c6fc9c49bf8159ebcdbc2de242ab25df5662d0114d8485e72b2e02a18df5feba7306bdd175e936e9f875fdebfa012e34ef723d21aad869b642e0aaeefed3323748be5a8c1484fd704944c1fa2a0b2eb4f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001315ac59000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/128, 0x80}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x7, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x2041, &(0x7f0000000e00)={0x0, 0x3938700}) 03:32:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) r0 = gettid() sched_setattr(r0, &(0x7f0000000080)={0xfffffffffffffff7, 0x6, 0xd6d15556843daac0, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) (async) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (rerun: 64) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) (async) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="521b49e0431bf14b07819abd500000000000000000000000000000001cec00"], 0x30}}, 0x4048010) (async) creat(&(0x7f0000000040)='./bus\x00', 0x1a) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3110.571816][ C0] sd 0:0:1:0: tag#1309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.580011][ C1] sd 0:0:1:0: tag#1311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.581662][ C0] sd 0:0:1:0: tag#1309 CDB: opcode=0xe5 (vendor) [ 3110.591463][ C1] sd 0:0:1:0: tag#1311 CDB: opcode=0xe5 (vendor) [ 3110.597779][ C0] sd 0:0:1:0: tag#1309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.604101][ C1] sd 0:0:1:0: tag#1311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 03:32:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001440)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x6, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0xffe, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$IPSET_CMD_HEADER(r7, 0x0, 0x404c000) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001440)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x6, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0xffe, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r6, 0x0, r6) (async) sendmsg$IPSET_CMD_HEADER(r7, 0x0, 0x404c000) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3110.613126][ C0] sd 0:0:1:0: tag#1309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3110.622117][ C1] sd 0:0:1:0: tag#1311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3110.631119][ C0] sd 0:0:1:0: tag#1309 CDB[20]: ba [ 3110.645296][ C1] sd 0:0:1:0: tag#1311 CDB[20]: ba [ 3110.654332][ C0] sd 0:0:1:0: tag#1314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.664163][ C0] sd 0:0:1:0: tag#1314 CDB: opcode=0xe5 (vendor) [ 3110.670491][ C0] sd 0:0:1:0: tag#1314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.679535][ C0] sd 0:0:1:0: tag#1314 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3110.688569][ C0] sd 0:0:1:0: tag#1314 CDB[20]: ba 03:32:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:33 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000ec0)={0x38, 0x5, 0x28, 0x9, 0x2, 0x97, 0x401, 0x752, 0x1f0000, 0x7fff}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setattr(0x0, &(0x7f0000000f00)={0x38, 0x6, 0x4, 0x2, 0x1, 0xfffffffffffffffd, 0x7fff, 0x7fff, 0x55, 0x81}, 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) sendfile(r0, r0, 0x0, 0x8080ffffff80) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) recvmmsg$unix(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/78, 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="b00500010e0014000000e60000000000000000002404265943575b0466d30d4a02b85266dd666f68e20ade06b4177863b55a760d792c6fc9c49bf8159ebcdbc2de242ab25df5662d0114d8485e72b2e02a18df5feba7306bdd175e936e9f875fdebfa012e34ef723d21aad869b642e0aaeefed3323748be5a8c1484fd704944c1fa2a0b2eb4f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001315ac59000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/128, 0x80}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x7, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x2041, &(0x7f0000000e00)={0x0, 0x3938700}) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000ec0)={0x38, 0x5, 0x28, 0x9, 0x2, 0x97, 0x401, 0x752, 0x1f0000, 0x7fff}, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) sched_setattr(0x0, &(0x7f0000000f00)={0x38, 0x6, 0x4, 0x2, 0x1, 0xfffffffffffffffd, 0x7fff, 0x7fff, 0x55, 0x81}, 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r4, 0x0, r4) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async) recvmmsg$unix(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/78, 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="b00500010e0014000000e60000000000000000002404265943575b0466d30d4a02b85266dd666f68e20ade06b4177863b55a760d792c6fc9c49bf8159ebcdbc2de242ab25df5662d0114d8485e72b2e02a18df5feba7306bdd175e936e9f875fdebfa012e34ef723d21aad869b642e0aaeefed3323748be5a8c1484fd704944c1fa2a0b2eb4f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001315ac59000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/45, 0x2d}], 0x1}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/128, 0x80}, {&(0x7f0000000b40)=""/217, 0xd9}], 0x7, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x2041, &(0x7f0000000e00)={0x0, 0x3938700}) (async) 03:32:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = gettid() sched_setattr(r0, &(0x7f0000000080)={0xfffffffffffffff7, 0x6, 0xd6d15556843daac0, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) (async) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="521b49e0431bf14b07819abd500000000000000000000000000000001cec00"], 0x30}}, 0x4048010) (async) creat(&(0x7f0000000040)='./bus\x00', 0x1a) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3110.850266][ C0] sd 0:0:1:0: tag#1318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.860157][ C0] sd 0:0:1:0: tag#1318 CDB: opcode=0xe5 (vendor) [ 3110.866605][ C0] sd 0:0:1:0: tag#1318 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.875664][ C0] sd 0:0:1:0: tag#1318 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3110.884704][ C0] sd 0:0:1:0: tag#1318 CDB[20]: ba [ 3110.903786][T25674] cgroup: fork rejected by pids controller in /syz1 [ 3110.918802][ C0] sd 0:0:1:0: tag#1323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.928628][ C0] sd 0:0:1:0: tag#1323 CDB: opcode=0xe5 (vendor) [ 3110.934953][ C0] sd 0:0:1:0: tag#1323 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.943986][ C0] sd 0:0:1:0: tag#1323 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:32:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001440)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x6, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0xffe, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$IPSET_CMD_HEADER(r7, 0x0, 0x404c000) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3110.953023][ C0] sd 0:0:1:0: tag#1323 CDB[20]: ba [ 3110.972192][ C0] sd 0:0:1:0: tag#1336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3110.982017][ C0] sd 0:0:1:0: tag#1336 CDB: opcode=0xe5 (vendor) [ 3110.988347][ C0] sd 0:0:1:0: tag#1336 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3110.997399][ C0] sd 0:0:1:0: tag#1336 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3111.006454][ C0] sd 0:0:1:0: tag#1336 CDB[20]: ba 03:32:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:34 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xd, &(0x7f0000000080)={0x80000000}) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000100)={0x1, 0x40, 0x0, 0x1, 0x1, [0x3, 0x9, 0x8, 0x9]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x1, 0x0, 0x6, 0xa9}, 0x6) [ 3111.105076][ C1] sd 0:0:1:0: tag#1337 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3111.114945][ C1] sd 0:0:1:0: tag#1337 CDB: opcode=0xe5 (vendor) [ 3111.121286][ C1] sd 0:0:1:0: tag#1337 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3111.130346][ C1] sd 0:0:1:0: tag#1337 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3111.139399][ C1] sd 0:0:1:0: tag#1337 CDB[20]: ba 03:32:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) io_setup(0xfffff800, &(0x7f0000000040)) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:34 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xd, &(0x7f0000000080)={0x80000000}) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000100)={0x1, 0x40, 0x0, 0x1, 0x1, [0x3, 0x9, 0x8, 0x9]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x1, 0x0, 0x6, 0xa9}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) (async) setrlimit(0xd, &(0x7f0000000080)={0x80000000}) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000100)={0x1, 0x40, 0x0, 0x1, 0x1, [0x3, 0x9, 0x8, 0x9]}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x1, 0x0, 0x6, 0xa9}, 0x6) (async) [ 3111.352168][ C1] sd 0:0:1:0: tag#1343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3111.362023][ C1] sd 0:0:1:0: tag#1343 CDB: opcode=0xe5 (vendor) [ 3111.368378][ C1] sd 0:0:1:0: tag#1343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3111.377468][ C1] sd 0:0:1:0: tag#1343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3111.386500][ C1] sd 0:0:1:0: tag#1343 CDB[20]: ba 03:32:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3f, 0x0, 0xfffffffd}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @struct={0x7, 0x7}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, r2, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4000000000004, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x5, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x202, 0x0, 0x6]}, {0x5, @struct={0x3116, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x99, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x0, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x7, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x3f, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4436) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x8000000, 0x80000001, 0x1, 0x5}) 03:32:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) io_setup(0xfffff800, &(0x7f0000000040)) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) io_setup(0xfffff800, &(0x7f0000000040)) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) [ 3114.001387][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 3114.001414][ C0] sd 0:0:1:0: tag#1292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3114.017885][ C0] sd 0:0:1:0: tag#1292 CDB: opcode=0xe5 (vendor) [ 3114.024230][ C0] sd 0:0:1:0: tag#1292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3114.033289][ C0] sd 0:0:1:0: tag#1292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3114.038442][ C1] sd 0:0:1:0: tag#1293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3114.042328][ C0] sd 0:0:1:0: tag#1292 CDB[20]: ba [ 3114.057252][ C1] sd 0:0:1:0: tag#1293 CDB: opcode=0xe5 (vendor) [ 3114.063600][ C1] sd 0:0:1:0: tag#1293 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3114.072646][ C1] sd 0:0:1:0: tag#1293 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3114.081688][ C1] sd 0:0:1:0: tag#1293 CDB[20]: ba 03:32:40 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xd, &(0x7f0000000080)={0x80000000}) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async, rerun: 64) syz_open_dev$sg(0x0, 0x0, 0x0) (async, rerun: 64) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) (rerun: 64) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000100)={0x1, 0x40, 0x0, 0x1, 0x1, [0x3, 0x9, 0x8, 0x9]}) (rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async, rerun: 64) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x1, 0x0, 0x6, 0xa9}, 0x6) (rerun: 64) 03:32:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3f, 0x0, 0xfffffffd}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @struct={0x7, 0x7}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, r2, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4000000000004, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 32) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) (rerun: 32) lseek(r3, 0x4200, 0x0) (async) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async, rerun: 64) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (rerun: 64) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3117.397426][ C0] sd 0:0:1:0: tag#1294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3117.407293][ C0] sd 0:0:1:0: tag#1294 CDB: opcode=0xe5 (vendor) [ 3117.413664][ C0] sd 0:0:1:0: tag#1294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3117.422707][ C0] sd 0:0:1:0: tag#1294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3117.431726][ C0] sd 0:0:1:0: tag#1294 CDB[20]: ba [ 3117.457952][ C0] sd 0:0:1:0: tag#1295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3117.467804][ C0] sd 0:0:1:0: tag#1295 CDB: opcode=0xe5 (vendor) [ 3117.474166][ C0] sd 0:0:1:0: tag#1295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3117.483207][ C0] sd 0:0:1:0: tag#1295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3117.492266][ C0] sd 0:0:1:0: tag#1295 CDB[20]: ba 03:32:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) io_setup(0xfffff800, &(0x7f0000000040)) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:40 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3f, 0x0, 0xfffffffd}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002980)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000780)={0x1, 0x4, 0x0, 0x3, {0x20, 0x1ff, 0x6, 0x6d3, 0x80000000}, [0x0, 0x4, 0x400, 0x1]}}, @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @struct={0x7, 0x7}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, r2, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4000000000004, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r3, r6, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3119.375156][ C1] sd 0:0:1:0: tag#1342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3119.385121][ C1] sd 0:0:1:0: tag#1342 CDB: opcode=0xe5 (vendor) [ 3119.391520][ C1] sd 0:0:1:0: tag#1342 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3119.400616][ C1] sd 0:0:1:0: tag#1342 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3119.409654][ C1] sd 0:0:1:0: tag#1342 CDB[20]: ba 03:32:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendfile(r0, r0, 0x0, 0x8080ffffff80) (rerun: 32) [ 3120.364402][ C1] sd 0:0:1:0: tag#1291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3120.374284][ C1] sd 0:0:1:0: tag#1291 CDB: opcode=0xe5 (vendor) [ 3120.380637][ C1] sd 0:0:1:0: tag#1291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3120.389698][ C1] sd 0:0:1:0: tag#1291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3120.398738][ C1] sd 0:0:1:0: tag#1291 CDB[20]: ba 03:32:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x5, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x202, 0x0, 0x6]}, {0x5, @struct={0x3116, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x99, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x0, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x7, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x3f, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4436) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x8000000, 0x80000001, 0x1, 0x5}) 03:32:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:32:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x57, 0x81, 0x0, 0x86, 0x0, 0x4, 0x62000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x1122, 0x3, 0x101, 0x0, 0x3ff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xc, r0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3120.545660][ C1] sd 0:0:1:0: tag#1314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3120.555535][ C1] sd 0:0:1:0: tag#1314 CDB: opcode=0xe5 (vendor) [ 3120.561882][ C1] sd 0:0:1:0: tag#1314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3120.570941][ C1] sd 0:0:1:0: tag#1314 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3120.579986][ C1] sd 0:0:1:0: tag#1314 CDB[20]: ba [ 3120.616039][ C0] sd 0:0:1:0: tag#1317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3120.625898][ C0] sd 0:0:1:0: tag#1317 CDB: opcode=0xe5 (vendor) [ 3120.632248][ C0] sd 0:0:1:0: tag#1317 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3120.641613][ C0] sd 0:0:1:0: tag#1317 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3120.650649][ C0] sd 0:0:1:0: tag#1317 CDB[20]: ba [ 3122.327400][ C1] sd 0:0:1:0: tag#1316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3122.337269][ C1] sd 0:0:1:0: tag#1316 CDB: opcode=0xe5 (vendor) [ 3122.343670][ C1] sd 0:0:1:0: tag#1316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3122.352715][ C1] sd 0:0:1:0: tag#1316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3122.361734][ C1] sd 0:0:1:0: tag#1316 CDB[20]: ba 03:32:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:45 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1e1b00, 0x0) syz_open_dev$sg(0x0, 0x40000000000000, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x51, 0x7, @buffer={0x0, 0xfffffffffffffd72, &(0x7f0000000100)=""/146}, &(0x7f0000000040)="c8a25efea7c6507b3da702781750f7302abd68a2f9edd27310447523cdadc895b2e1506c9797e4707b59c2935c1f3dc2739f84a0a3659d18412d81422d53aeac2fa98e319d96bfc11d0af65c7ac3b53c3e", &(0x7f0000000300)=""/173, 0xffff, 0x24, 0x3, &(0x7f00000001c0)}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async, rerun: 64) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x57, 0x81, 0x0, 0x86, 0x0, 0x4, 0x62000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x1122, 0x3, 0x101, 0x0, 0x3ff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xc, r0, 0x0) (async, rerun: 64) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x100ff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x1ff, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) r5 = dup2(r1, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x31, 0x3f, 0x0, 0x7f, 0x0, 0xc7, 0xc1800, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x417, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x8205, 0xffff, 0x1ff, 0x4, 0x2, 0xffff, 0x3ff, 0x0, 0xffff0859, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r5, 0x2) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3122.855327][ C1] sd 0:0:1:0: tag#1322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3122.865175][ C1] sd 0:0:1:0: tag#1322 CDB: opcode=0xe5 (vendor) [ 3122.871502][ C1] sd 0:0:1:0: tag#1322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3122.880544][ C1] sd 0:0:1:0: tag#1322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3122.889590][ C1] sd 0:0:1:0: tag#1322 CDB[20]: ba 03:32:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:46 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1e1b00, 0x0) syz_open_dev$sg(0x0, 0x40000000000000, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x51, 0x7, @buffer={0x0, 0xfffffffffffffd72, &(0x7f0000000100)=""/146}, &(0x7f0000000040)="c8a25efea7c6507b3da702781750f7302abd68a2f9edd27310447523cdadc895b2e1506c9797e4707b59c2935c1f3dc2739f84a0a3659d18412d81422d53aeac2fa98e319d96bfc11d0af65c7ac3b53c3e", &(0x7f0000000300)=""/173, 0xffff, 0x24, 0x3, &(0x7f00000001c0)}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x1e1b00, 0x0) (async) syz_open_dev$sg(0x0, 0x40000000000000, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x51, 0x7, @buffer={0x0, 0xfffffffffffffd72, &(0x7f0000000100)=""/146}, &(0x7f0000000040)="c8a25efea7c6507b3da702781750f7302abd68a2f9edd27310447523cdadc895b2e1506c9797e4707b59c2935c1f3dc2739f84a0a3659d18412d81422d53aeac2fa98e319d96bfc11d0af65c7ac3b53c3e", &(0x7f0000000300)=""/173, 0xffff, 0x24, 0x3, &(0x7f00000001c0)}) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) [ 3122.940303][ C0] sd 0:0:1:0: tag#1331 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3122.950156][ C0] sd 0:0:1:0: tag#1331 CDB: opcode=0xe5 (vendor) [ 3122.956513][ C0] sd 0:0:1:0: tag#1331 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3122.965552][ C0] sd 0:0:1:0: tag#1331 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3122.974601][ C0] sd 0:0:1:0: tag#1331 CDB[20]: ba 03:32:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3126.382797][ C1] sd 0:0:1:0: tag#1322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3126.392776][ C1] sd 0:0:1:0: tag#1322 CDB: opcode=0xe5 (vendor) [ 3126.399124][ C1] sd 0:0:1:0: tag#1322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3126.408245][ C1] sd 0:0:1:0: tag#1322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3126.417277][ C1] sd 0:0:1:0: tag#1322 CDB[20]: ba 03:32:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x5, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x202, 0x0, 0x6]}, {0x5, @struct={0x3116, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x99, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x0, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x7, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x3f, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x4436) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x8000000, 0x80000001, 0x1, 0x5}) 03:32:50 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1e1b00, 0x0) syz_open_dev$sg(0x0, 0x40000000000000, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x51, 0x7, @buffer={0x0, 0xfffffffffffffd72, &(0x7f0000000100)=""/146}, &(0x7f0000000040)="c8a25efea7c6507b3da702781750f7302abd68a2f9edd27310447523cdadc895b2e1506c9797e4707b59c2935c1f3dc2739f84a0a3659d18412d81422d53aeac2fa98e319d96bfc11d0af65c7ac3b53c3e", &(0x7f0000000300)=""/173, 0xffff, 0x24, 0x3, &(0x7f00000001c0)}) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x1e1b00, 0x0) (async) syz_open_dev$sg(0x0, 0x40000000000000, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x51, 0x7, @buffer={0x0, 0xfffffffffffffd72, &(0x7f0000000100)=""/146}, &(0x7f0000000040)="c8a25efea7c6507b3da702781750f7302abd68a2f9edd27310447523cdadc895b2e1506c9797e4707b59c2935c1f3dc2739f84a0a3659d18412d81422d53aeac2fa98e319d96bfc11d0af65c7ac3b53c3e", &(0x7f0000000300)=""/173, 0xffff, 0x24, 0x3, &(0x7f00000001c0)}) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:32:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x57, 0x81, 0x0, 0x86, 0x0, 0x4, 0x62000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x1122, 0x3, 0x101, 0x0, 0x3ff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xc, r0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async, rerun: 64) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) (async, rerun: 64) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) 03:32:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x100ff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x1ff, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (rerun: 64) r5 = dup2(r1, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x31, 0x3f, 0x0, 0x7f, 0x0, 0xc7, 0xc1800, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x417, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x8205, 0xffff, 0x1ff, 0x4, 0x2, 0xffff, 0x3ff, 0x0, 0xffff0859, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r5, 0x2) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3127.220992][ C0] sd 0:0:1:0: tag#1441 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3127.230880][ C0] sd 0:0:1:0: tag#1441 CDB: opcode=0xe5 (vendor) [ 3127.233476][ C1] sd 0:0:1:0: tag#1442 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3127.237238][ C0] sd 0:0:1:0: tag#1441 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3127.247017][ C1] sd 0:0:1:0: tag#1442 CDB: opcode=0xe5 (vendor) [ 3127.256017][ C0] sd 0:0:1:0: tag#1441 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3127.262338][ C1] sd 0:0:1:0: tag#1442 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3127.271336][ C0] sd 0:0:1:0: tag#1441 CDB[20]: ba [ 3127.280349][ C1] sd 0:0:1:0: tag#1442 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3127.294468][ C1] sd 0:0:1:0: tag#1442 CDB[20]: ba 03:32:52 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xc6, 0xd1, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000100)="e9c79f1be32b046a362098c61ff89aec091f3122351d9960273d683c6c11ef14288fbe920c2932acf5f891b75aa67d5a2cb5ebc773595e2a4e372a69841d33c50f6012cfdfeed91a42e82bd127caae90b32152f796d0dc5a7665a76991d37064f3a675e14fcbdd851ed5f4ceda702564c704b7fcad19911aebb9601437e11ffb203bbca654ac68e0743ac714edc438f261ffed9a8cab4558386082422c451d3d5049d14bd5cc2ef61f4b4683ac37fff4c18bea811fe680e88618820b30ac49239264a513e05b", &(0x7f0000000300)=""/134, 0x5, 0x8, 0x1, &(0x7f0000000040)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) 03:32:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0x100ff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x1ff, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) r5 = dup2(r1, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x31, 0x3f, 0x0, 0x7f, 0x0, 0xc7, 0xc1800, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x417, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x8205, 0xffff, 0x1ff, 0x4, 0x2, 0xffff, 0x3ff, 0x0, 0xffff0859, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r5, 0x2) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xe0, 0xf, 0xff, 0x7, 0x0, 0x3, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x50000, 0xfffffffffffffff8, 0x5d, 0x1, 0x9ce9, 0x7, 0x1f, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x1, r2, 0x13) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) read(r5, &(0x7f0000000180)=""/10, 0xa) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3130.344427][ C0] sd 0:0:1:0: tag#1425 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3130.354280][ C0] sd 0:0:1:0: tag#1425 CDB: opcode=0xe5 (vendor) [ 3130.360615][ C0] sd 0:0:1:0: tag#1425 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3130.369659][ C0] sd 0:0:1:0: tag#1425 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3130.378694][ C0] sd 0:0:1:0: tag#1425 CDB[20]: ba [ 3130.858094][ C1] sd 0:0:1:0: tag#1586 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3130.867990][ C1] sd 0:0:1:0: tag#1586 CDB: opcode=0xe5 (vendor) [ 3130.874378][ C1] sd 0:0:1:0: tag#1586 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3130.883441][ C1] sd 0:0:1:0: tag#1586 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3130.892518][ C1] sd 0:0:1:0: tag#1586 CDB[20]: ba 03:32:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) io_setup(0x5, &(0x7f0000000100)=0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000300)="6d9a3cec7a971ba92c7df86de1613ebe8cfc8a72df7879f2ea1dbed122e76b6d45bbfca5f7c6a66f0a1a4a51d2ee1aec5d6f2be798f16ee5e47a1aa5f3920e13e7c5a897d869e512275cdee23238e334ad333631b9940b1b7d277d81ebb7bf2f71280cebb47e4edd4c336c3e572fd323e495a6026ab7867e6316d69d531e1b709578c4cc51001ec7eda911d4660fa988883a12dfd0349be804f5de781960f5a505b3f0a3f25be026249b9d31b485218f1e3e8b313f4b", 0xb6, 0x4, 0x0, 0x3}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3131.352244][ T2589] ================================================================== [ 3131.360341][ T2589] BUG: KCSAN: data-race in __folio_end_writeback / writeout_period [ 3131.368221][ T2589] [ 3131.370531][ T2589] write to 0xffffffff86dc5130 of 8 bytes by interrupt on cpu 0: [ 3131.378135][ T2589] writeout_period+0xa6/0xe0 [ 3131.382722][ T2589] call_timer_fn+0x2e/0x240 [ 3131.387215][ T2589] expire_timers+0x116/0x240 [ 3131.391784][ T2589] __run_timers+0x368/0x410 [ 3131.396270][ T2589] run_timer_softirq+0x56/0x60 [ 3131.401016][ T2589] __do_softirq+0x158/0x2de [ 3131.405508][ T2589] irq_exit_rcu+0x37/0x70 [ 3131.409820][ T2589] sysvec_apic_timer_interrupt+0x8d/0xb0 [ 3131.415430][ T2589] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3131.421396][ T2589] acpi_idle_enter+0x282/0x300 [ 3131.426137][ T2589] cpuidle_enter_state+0x2b4/0x7d0 [ 3131.431225][ T2589] cpuidle_enter+0x3c/0x60 [ 3131.435634][ T2589] do_idle+0x1b2/0x250 [ 3131.439684][ T2589] cpu_startup_entry+0x15/0x20 [ 3131.444426][ T2589] rest_init+0xfa/0x100 [ 3131.448577][ T2589] arch_call_rest_init+0xa/0xb [ 3131.453331][ T2589] start_kernel+0x5e4/0x669 [ 3131.457810][ T2589] secondary_startup_64_no_verify+0xb1/0xbb [ 3131.463681][ T2589] [ 3131.465995][ T2589] read to 0xffffffff86dc5130 of 8 bytes by task 2589 on cpu 1: [ 3131.473527][ T2589] __folio_end_writeback+0x2b3/0x580 [ 3131.478792][ T2589] folio_end_writeback+0x57/0x130 [ 3131.483793][ T2589] end_page_writeback+0x37/0x50 [ 3131.488621][ T2589] ext4_finish_bio+0x3e2/0x430 [ 3131.493372][ T2589] ext4_release_io_end+0x98/0x200 [ 3131.498381][ T2589] ext4_end_io_rsv_work+0x306/0x360 [ 3131.503573][ T2589] process_one_work+0x3fc/0x980 [ 3131.508403][ T2589] worker_thread+0x616/0xa70 [ 3131.512969][ T2589] kthread+0x2c7/0x2e0 [ 3131.517016][ T2589] ret_from_fork+0x1f/0x30 [ 3131.521415][ T2589] [ 3131.523714][ T2589] value changed: 0x00000001000451e4 -> 0x0000000100045310 [ 3131.530806][ T2589] [ 3131.533104][ T2589] Reported by Kernel Concurrency Sanitizer on: [ 3131.539226][ T2589] CPU: 1 PID: 2589 Comm: kworker/u4:63 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 3131.549188][ T2589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3131.559220][ T2589] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 3131.565961][ T2589] ================================================================== 03:32:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xe0, 0xf, 0xff, 0x7, 0x0, 0x3, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x50000, 0xfffffffffffffff8, 0x5d, 0x1, 0x9ce9, 0x7, 0x1f, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x1, r2, 0x13) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) read(r5, &(0x7f0000000180)=""/10, 0xa) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x100) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3131.642032][ C1] sd 0:0:1:0: tag#1671 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3131.651916][ C1] sd 0:0:1:0: tag#1671 CDB: opcode=0xe5 (vendor) [ 3131.658321][ C1] sd 0:0:1:0: tag#1671 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3131.667374][ C1] sd 0:0:1:0: tag#1671 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3131.676446][ C1] sd 0:0:1:0: tag#1671 CDB[20]: ba [ 3131.691738][ C0] sd 0:0:1:0: tag#1584 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3131.701595][ C0] sd 0:0:1:0: tag#1584 CDB: opcode=0xe5 (vendor) [ 3131.707968][ C0] sd 0:0:1:0: tag#1584 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3131.717010][ C0] sd 0:0:1:0: tag#1584 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3131.726055][ C0] sd 0:0:1:0: tag#1584 CDB[20]: ba [ 3132.006634][ C0] sd 0:0:1:0: tag#1613 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3132.016509][ C0] sd 0:0:1:0: tag#1613 CDB: opcode=0xe5 (vendor) [ 3132.022855][ C0] sd 0:0:1:0: tag#1613 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3132.031870][ C0] sd 0:0:1:0: tag#1613 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3132.040901][ C0] sd 0:0:1:0: tag#1613 CDB[20]: ba 03:32:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) 03:32:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xe0, 0xf, 0xff, 0x7, 0x0, 0x3, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x50000, 0xfffffffffffffff8, 0x5d, 0x1, 0x9ce9, 0x7, 0x1f, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x1, r2, 0x13) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) read(r5, &(0x7f0000000180)=""/10, 0xa) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001440)=@nfs={0x90, 0x24, {0x7, 0x8, 0x0, 0x80, "00b9e4643874984fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae3fae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8be96cc8d7bb60010fa9ce78be67ad0163afabb7bd3"}}, 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xc6, 0xd1, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000100)="e9c79f1be32b046a362098c61ff89aec091f3122351d9960273d683c6c11ef14288fbe920c2932acf5f891b75aa67d5a2cb5ebc773595e2a4e372a69841d33c50f6012cfdfeed91a42e82bd127caae90b32152f796d0dc5a7665a76991d37064f3a675e14fcbdd851ed5f4ceda702564c704b7fcad19911aebb9601437e11ffb203bbca654ac68e0743ac714edc438f261ffed9a8cab4558386082422c451d3d5049d14bd5cc2ef61f4b4683ac37fff4c18bea811fe680e88618820b30ac49239264a513e05b", &(0x7f0000000300)=""/134, 0x5, 0x8, 0x1, &(0x7f0000000040)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xc6, 0xd1, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000100)="e9c79f1be32b046a362098c61ff89aec091f3122351d9960273d683c6c11ef14288fbe920c2932acf5f891b75aa67d5a2cb5ebc773595e2a4e372a69841d33c50f6012cfdfeed91a42e82bd127caae90b32152f796d0dc5a7665a76991d37064f3a675e14fcbdd851ed5f4ceda702564c704b7fcad19911aebb9601437e11ffb203bbca654ac68e0743ac714edc438f261ffed9a8cab4558386082422c451d3d5049d14bd5cc2ef61f4b4683ac37fff4c18bea811fe680e88618820b30ac49239264a513e05b", &(0x7f0000000300)=""/134, 0x5, 0x8, 0x1, &(0x7f0000000040)}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:32:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (rerun: 64) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async, rerun: 32) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x100) (async, rerun: 32) io_setup(0x1ff, &(0x7f0000000400)=0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 3134.324060][ T24] audit: type=1400 audit(1639279977.454:314): avc: denied { create } for pid=25939 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3135.352111][ C1] sd 0:0:1:0: tag#1723 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3135.362206][ C1] sd 0:0:1:0: tag#1723 CDB: opcode=0xe5 (vendor) [ 3135.368727][ C1] sd 0:0:1:0: tag#1723 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3135.377929][ C1] sd 0:0:1:0: tag#1723 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3135.387111][ C1] sd 0:0:1:0: tag#1723 CDB[20]: ba [ 3135.414688][ C0] sd 0:0:1:0: tag#1608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3135.424546][ C0] sd 0:0:1:0: tag#1608 CDB: opcode=0xe5 (vendor) [ 3135.430884][ C0] sd 0:0:1:0: tag#1608 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3135.439935][ C0] sd 0:0:1:0: tag#1608 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3135.448991][ C0] sd 0:0:1:0: tag#1608 CDB[20]: ba 03:32:58 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xc6, 0xd1, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000100)="e9c79f1be32b046a362098c61ff89aec091f3122351d9960273d683c6c11ef14288fbe920c2932acf5f891b75aa67d5a2cb5ebc773595e2a4e372a69841d33c50f6012cfdfeed91a42e82bd127caae90b32152f796d0dc5a7665a76991d37064f3a675e14fcbdd851ed5f4ceda702564c704b7fcad19911aebb9601437e11ffb203bbca654ac68e0743ac714edc438f261ffed9a8cab4558386082422c451d3d5049d14bd5cc2ef61f4b4683ac37fff4c18bea811fe680e88618820b30ac49239264a513e05b", &(0x7f0000000300)=""/134, 0x5, 0x8, 0x1, &(0x7f0000000040)}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) creat(0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="da", 0x1}]) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0xc6, 0xd1, @buffer={0x0, 0x1000, &(0x7f0000000580)=""/4096}, &(0x7f0000000100)="e9c79f1be32b046a362098c61ff89aec091f3122351d9960273d683c6c11ef14288fbe920c2932acf5f891b75aa67d5a2cb5ebc773595e2a4e372a69841d33c50f6012cfdfeed91a42e82bd127caae90b32152f796d0dc5a7665a76991d37064f3a675e14fcbdd851ed5f4ceda702564c704b7fcad19911aebb9601437e11ffb203bbca654ac68e0743ac714edc438f261ffed9a8cab4558386082422c451d3d5049d14bd5cc2ef61f4b4683ac37fff4c18bea811fe680e88618820b30ac49239264a513e05b", &(0x7f0000000300)=""/134, 0x5, 0x8, 0x1, &(0x7f0000000040)}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x8080ffffff80) (async) 03:32:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x100) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x7, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x4, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x4, [0x6, 0x4, 0x0, 0x200, 0x0, 0x4]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) getrlimit(0xa, &(0x7f0000000040)) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000240), 0xa1089, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000006,access=client,cache=none,loose,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000e91,euid<', @ANYRESDEC=0x0, @ANYBLOB=',rootcojtext=root,appraise,\x00']) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001600)=ANY=[@ANYBLOB="90000000240000000700000008000000004fe0d7e0b4393209c43cc5cb7416d6c5043f6bfa5013b893bedf9dcadbe29c93115110e92eed2cb7aa4dc9c9733b2cdae54043b955e1e765ffe6611806dfcab0182cc7e7fd204defae25ae0f64253917a2d57ae3050addec5b13e60db313d20b6a5eaba8080000007bb60010fa9ce78be67ad0163afabb7bd30000000000000000000000000000830d1fa6a379d22b1869ea183469beb6a4ab34914903cf35963afcfeeb7c471d122f5996d96d7f5e6708510d2d91816d00d7de60649aa6e034bddf3fe5c771750fb9bb55a9a63b4a8b54106c546fab76a3b6c953575738d8474224199023545785e1c347c4a834af2ab938547bc4e2e8c2d48c301143f19be5d2d8fd12c8b3678c5617a9ce3004a3e59414f531cb9bcff28b0d549c578fa6"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:32:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(0x0, 0x0) [ 3135.597491][ C0] sd 0:0:1:0: tag#1690 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3135.607346][ C0] sd 0:0:1:0: tag#1690 CDB: opcode=0xe5 (vendor) [ 3135.613699][ C0] sd 0:0:1:0: tag#1690 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3135.622738][ C0] sd 0:0:1:0: tag#1690 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3135.627751][ C1] sd 0:0:1:0: tag#1691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3135.631773][ C0] sd 0:0:1:0: tag#1690 CDB[20]: ba [ 3135.646724][ C1] sd 0:0:1:0: tag#1691 CDB: opcode=0xe5 (vendor) [ 3135.653094][ C1] sd 0:0:1:0: tag#1691 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3135.662149][ C1] sd 0:0:1:0: tag#1691 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3135.671167][ C1] sd 0:0:1:0: tag#1691 CDB[20]: ba [ 3137.332793][ C0] sd 0:0:1:0: tag#1692 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 3137.342650][ C0] sd 0:0:1:0: tag#1692 CDB: opcode=0xe5 (vendor) [ 3137.348980][ C0] sd 0:0:1:0: tag#1692 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3137.358039][ C0] sd 0:0:1:0: tag#1692 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3137.367087][ C0] sd 0:0:1:0: tag#1692 CDB[20]: ba 03:33:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) (async) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) io_setup(0x5, &(0x7f0000000100)=0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000300)="6d9a3cec7a971ba92c7df86de1613ebe8cfc8a72df7879f2ea1dbed122e76b6d45bbfca5f7c6a66f0a1a4a51d2ee1aec5d6f2be798f16ee5e47a1aa5f3920e13e7c5a897d869e512275cdee23238e334ad333631b9940b1b7d277d81ebb7bf2f71280cebb47e4edd4c336c3e572fd323e495a6026ab7867e6316d69d531e1b709578c4cc51001ec7eda911d4660fa988883a12dfd0349be804f5de781960f5a505b3f0a3f25be026249b9d31b485218f1e3e8b313f4b", 0xb6, 0x4, 0x0, 0x3}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:33:01 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x1, 0x10000047, 0x80000001, 0x1a, 0x3, 0x0, 0xb49d, 0x80, 0x4}, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080ffffff80) 03:33:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x7, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x4, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x4, [0x6, 0x4, 0x0, 0x200, 0x0, 0x4]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) getrlimit(0xa, &(0x7f0000000040)) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000240), 0xa1089, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000006,access=client,cache=none,loose,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000e91,euid<', @ANYRESDEC=0x0, @ANYBLOB=',rootcojtext=root,appraise,\x00']) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x282) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x7, 0x71, 0x8, 0x8000], @devid}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x4, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x4, [0x6, 0x4, 0x0, 0x200, 0x0, 0x4]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) getrlimit(0xa, &(0x7f0000000040)) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r2, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000240), 0xa1089, &(0x7f0000001500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000006,access=client,cache=none,loose,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000e91,euid<', @ANYRESDEC=0x0, @ANYBLOB=',rootcojtext=root,appraise,\x00']) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x282) (async) sendfile(r2, r5, 0x0, 0x8400fffffffb) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:33:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) sendfile(r1, r4, 0x0, 0x8400fffffffb) io_setup(0x5, &(0x7f0000000100)=0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000300)="6d9a3cec7a971ba92c7df86de1613ebe8cfc8a72df7879f2ea1dbed122e76b6d45bbfca5f7c6a66f0a1a4a51d2ee1aec5d6f2be798f16ee5e47a1aa5f3920e13e7c5a897d869e512275cdee23238e334ad333631b9940b1b7d277d81ebb7bf2f71280cebb47e4edd4c336c3e572fd323e495a6026ab7867e6316d69d531e1b709578c4cc51001ec7eda911d4660fa988883a12dfd0349be804f5de781960f5a505b3f0a3f25be026249b9d31b485218f1e3e8b313f4b", 0xb6, 0x4, 0x0, 0x3}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x0, 0x1000, 0x74, 0x0, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x0, 0x4}, 0x0, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) (async) creat(&(0x7f00000001c0)='./bus\x00', 0x0) (async) lseek(r1, 0x4200, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1ff, &(0x7f0000000400)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) (async) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048010) (async) sendfile(r1, r4, 0x0, 0x8400fffffffb) (async) io_setup(0x5, &(0x7f0000000100)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x40, r6, &(0x7f0000000300)="6d9a3cec7a971ba92c7df86de1613ebe8cfc8a72df7879f2ea1dbed122e76b6d45bbfca5f7c6a66f0a1a4a51d2ee1aec5d6f2be798f16ee5e47a1aa5f3920e13e7c5a897d869e512275cdee23238e334ad333631b9940b1b7d277d81ebb7bf2f71280cebb47e4edd4c336c3e572fd323e495a6026ab7867e6316d69d531e1b709578c4cc51001ec7eda911d4660fa988883a12dfd0349be804f5de781960f5a505b3f0a3f25be026249b9d31b485218f1e3e8b313f4b", 0xb6, 0x4, 0x0, 0x3}]) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) (async) creat(&(0x7f0000000740)='./bus\x00', 0x0) (async) 03:33:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/16], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) 03:33:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x9, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3117, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x200035b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:33:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xb, 0x1, {0x6be, @usage=0x3d9a8bc0, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @struct={0x3114, 0x8}, 0x0, 0x7ffc, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @struct={0x1000, 0x4}, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000906b00"/18], 0x30}}, 0x4048010) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(0x0, 0x0) [ 3138.340230][ C1] sd 0:0:1:0: tag#1721 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3138.350124][ C1] sd 0:0:1:0: tag#1721 CDB: opcode=0xe5 (vendor) [ 3138.356492][ C1] sd 0:0:1:0: tag#1721 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3138.365556][ C1] sd 0:0:1:0: tag#1721 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3138.374607][ C1] sd 0:0:1:0: tag#1721 CDB[20]: ba [ 3139.347504][ C1] sd 0:0:1:0: tag#1722 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3139.357389][ C1] sd 0:0:1:0: tag#1722 CDB: opcode=0xe5 (vendor) [ 3139.363751][ C1] sd 0:0:1:0: tag#1722 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3139.372806][ C1] sd 0:0:1:0: tag#1722 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3139.381835][ C1] sd 0:0:1:0: tag#1722 CDB[20]: ba [ 3140.360576][ C1] sd 0:0:1:0: tag#1723 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3140.370437][ C1] sd 0:0:1:0: tag#1723 CDB: opcode=0xe5 (vendor) [ 3140.376814][ C1] sd 0:0:1:0: tag#1723 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3140.385863][ C1] sd 0:0:1:0: tag#1723 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3140.394909][ C1] sd 0:0:1:0: tag#1723 CDB[20]: ba