0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 852.884703][T13783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.890653][T13783] RIP: 0033:0x4665f9 [ 852.894534][T13783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.914132][T13783] RSP: 002b:00007f4eb0ba0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 852.922625][T13783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 852.930594][T13783] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 852.938617][T13783] RBP: 00007f4eb0ba01d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.946582][T13783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.954548][T13783] R13: 00007ffcd60a231f R14: 00007f4eb0ba0300 R15: 0000000000022000 01:58:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 853.249813][ C0] scsi_io_completion_action: 29 callbacks suppressed [ 853.249842][ C0] sd 0:0:1:0: tag#675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.266282][ C0] sd 0:0:1:0: tag#675 CDB: opcode=0xe5 (vendor) [ 853.272550][ C0] sd 0:0:1:0: tag#675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.281522][ C0] sd 0:0:1:0: tag#675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.290470][ C0] sd 0:0:1:0: tag#675 CDB[20]: ba 01:58:57 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x2040000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 853.445888][ C0] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.455673][ C0] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 853.461932][ C0] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.470889][ C0] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.479844][ C0] sd 0:0:1:0: tag#676 CDB[20]: ba 01:58:57 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x6040000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:57 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x312, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:57 executing program 1 (fault-call:7 fault-nth:1): r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 01:58:57 executing program 2 (fault-call:7 fault-nth:0): r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) [ 853.683896][ C1] sd 0:0:1:0: tag#677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.693660][ C1] sd 0:0:1:0: tag#677 CDB: opcode=0xe5 (vendor) [ 853.699984][ C1] sd 0:0:1:0: tag#677 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.708951][ C1] sd 0:0:1:0: tag#677 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.717899][ C1] sd 0:0:1:0: tag#677 CDB[20]: ba [ 853.732582][T13813] FAULT_INJECTION: forcing a failure. [ 853.732582][T13813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.745651][T13813] CPU: 0 PID: 13813 Comm: syz-executor.1 Tainted: G W 5.14.0-syzkaller #0 [ 853.755449][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.765515][T13813] Call Trace: [ 853.768885][T13813] dump_stack_lvl+0xd6/0x122 [ 853.773510][T13813] dump_stack+0x11/0x1b [ 853.777657][T13813] should_fail+0x23c/0x250 [ 853.782072][T13813] should_fail_usercopy+0x16/0x20 [ 853.787135][T13813] _copy_from_user+0x1c/0xd0 [ 853.791733][T13813] __copy_msghdr_from_user+0x59/0x360 [ 853.792367][T13818] FAULT_INJECTION: forcing a failure. [ 853.792367][T13818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.797111][T13813] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 853.797140][T13813] sendmsg_copy_msghdr+0x5e/0x100 [ 853.821096][T13813] io_issue_sqe+0x249f/0x6590 [ 853.825830][T13813] ? avc_has_perm+0x70/0x160 [ 853.830432][T13813] ? avc_has_perm+0xd5/0x160 [ 853.835006][T13813] ? __list_del_entry_valid+0x54/0xc0 [ 853.840362][T13813] __io_queue_sqe+0x34/0x460 [ 853.844980][T13813] io_submit_sqe+0x88b/0x3e80 [ 853.849643][T13813] ? kmem_cache_alloc_bulk+0x289/0x340 [ 853.855082][T13813] io_submit_sqes+0x505/0xde0 [ 853.859819][T13813] __se_sys_io_uring_enter+0x20d/0xb30 [ 853.865432][T13813] ? __fget_light+0x21b/0x260 [ 853.870169][T13813] ? fput+0x2d/0x130 [ 853.874045][T13813] __x64_sys_io_uring_enter+0x74/0x80 [ 853.879407][T13813] do_syscall_64+0x44/0xa0 [ 853.883816][T13813] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 853.889707][T13813] RIP: 0033:0x4665f9 [ 853.893618][T13813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.913212][T13813] RSP: 002b:00007f4eb0ba0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 853.921611][T13813] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 853.929566][T13813] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000003 [ 853.937524][T13813] RBP: 00007f4eb0ba01d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.945485][T13813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.953450][T13813] R13: 00007ffcd60a231f R14: 00007f4eb0ba0300 R15: 0000000000022000 [ 853.961534][T13818] CPU: 1 PID: 13818 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 853.971334][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.981389][T13818] Call Trace: [ 853.984664][T13818] dump_stack_lvl+0xd6/0x122 [ 853.989250][T13818] dump_stack+0x11/0x1b [ 853.993458][T13818] should_fail+0x23c/0x250 [ 853.997867][T13818] should_fail_usercopy+0x16/0x20 [ 854.002886][T13818] _copy_to_user+0x1c/0x90 [ 854.007302][T13818] simple_read_from_buffer+0xab/0x120 [ 854.012743][T13818] proc_fail_nth_read+0x10d/0x150 [ 854.017761][T13818] ? proc_fault_inject_write+0x230/0x230 [ 854.023425][T13818] vfs_read+0x1e6/0x750 [ 854.027574][T13818] ? putname+0xc6/0xe0 [ 854.031684][T13818] ? __fdget+0x14/0x20 [ 854.035812][T13818] ? __fget_light+0x21b/0x260 [ 854.040540][T13818] ? __cond_resched+0x11/0x40 [ 854.045285][T13818] ksys_read+0xd9/0x190 [ 854.049504][T13818] __x64_sys_read+0x3e/0x50 [ 854.054117][T13818] do_syscall_64+0x44/0xa0 [ 854.058578][T13818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 854.064634][T13818] RIP: 0033:0x41937c [ 854.068514][T13818] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 854.088122][T13818] RSP: 002b:00007fb0c67e0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.096531][T13818] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 854.104491][T13818] RDX: 000000000000000f RSI: 00007fb0c67e01e0 RDI: 0000000000000005 [ 854.112525][T13818] RBP: 00007fb0c67e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 854.120493][T13818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.128541][T13818] R13: 00007ffde5025a0f R14: 00007fb0c67e0300 R15: 0000000000022000 01:58:58 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x6040000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:58 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) [ 854.309225][ C1] sd 0:0:1:0: tag#678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 854.318995][ C1] sd 0:0:1:0: tag#678 CDB: opcode=0xe5 (vendor) [ 854.325265][ C1] sd 0:0:1:0: tag#678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 854.334203][ C1] sd 0:0:1:0: tag#678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 854.343151][ C1] sd 0:0:1:0: tag#678 CDB[20]: ba 01:58:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:58 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x7000000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 854.569325][ C0] sd 0:0:1:0: tag#679 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 854.579175][ C0] sd 0:0:1:0: tag#679 CDB: opcode=0xe5 (vendor) [ 854.585436][ C0] sd 0:0:1:0: tag#679 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 854.594393][ C0] sd 0:0:1:0: tag#679 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 854.603348][ C0] sd 0:0:1:0: tag#679 CDB[20]: ba 01:58:58 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x402, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {r3}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 854.768967][ C0] sd 0:0:1:0: tag#680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 854.778742][ C0] sd 0:0:1:0: tag#680 CDB: opcode=0xe5 (vendor) [ 854.785116][ C0] sd 0:0:1:0: tag#680 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 854.794071][ C0] sd 0:0:1:0: tag#680 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 854.803022][ C0] sd 0:0:1:0: tag#680 CDB[20]: ba 01:58:58 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x7000000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) [ 855.141600][ C0] sd 0:0:1:0: tag#681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 855.151363][ C0] sd 0:0:1:0: tag#681 CDB: opcode=0xe5 (vendor) [ 855.157689][ C0] sd 0:0:1:0: tag#681 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 855.166656][ C0] sd 0:0:1:0: tag#681 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 855.175602][ C0] sd 0:0:1:0: tag#681 CDB[20]: ba 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) [ 855.288523][ C0] sd 0:0:1:0: tag#682 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 855.298292][ C0] sd 0:0:1:0: tag#682 CDB: opcode=0xe5 (vendor) [ 855.304554][ C0] sd 0:0:1:0: tag#682 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 855.313508][ C0] sd 0:0:1:0: tag#682 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 855.322462][ C0] sd 0:0:1:0: tag#682 CDB[20]: ba 01:58:59 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x10000000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x406, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:58:59 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) [ 855.815504][ C0] sd 0:0:1:0: tag#687 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 855.825356][ C0] sd 0:0:1:0: tag#687 CDB: opcode=0xe5 (vendor) [ 855.831635][ C0] sd 0:0:1:0: tag#687 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 855.840561][ C0] sd 0:0:1:0: tag#687 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 855.849523][ C0] sd 0:0:1:0: tag#687 CDB[20]: ba 01:58:59 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x10000000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:58:59 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 01:58:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) [ 855.997258][ C0] sd 0:0:1:0: tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 856.007047][ C0] sd 0:0:1:0: tag#688 CDB: opcode=0xe5 (vendor) [ 856.013346][ C0] sd 0:0:1:0: tag#688 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 856.022312][ C0] sd 0:0:1:0: tag#688 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 856.031268][ C0] sd 0:0:1:0: tag#688 CDB[20]: ba 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x40000000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:00 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x604, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x12020000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:00 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:00 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0x0) 01:59:00 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x42000000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:01 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x700, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:01 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x40000000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:01 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:01 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0x0) 01:59:01 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x47020000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:02 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:02 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xf00, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:02 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0x0) [ 858.520306][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 858.520330][ C1] sd 0:0:1:0: tag#693 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 858.536707][ C1] sd 0:0:1:0: tag#693 CDB: opcode=0xe5 (vendor) [ 858.542975][ C1] sd 0:0:1:0: tag#693 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 858.551922][ C1] sd 0:0:1:0: tag#693 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 858.560856][ C1] sd 0:0:1:0: tag#693 CDB[20]: ba 01:59:02 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x42000000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:02 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:02 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0x0) 01:59:02 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) [ 858.844468][ C1] sd 0:0:1:0: tag#694 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 858.854266][ C1] sd 0:0:1:0: tag#694 CDB: opcode=0xe5 (vendor) [ 858.860522][ C1] sd 0:0:1:0: tag#694 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 858.869472][ C1] sd 0:0:1:0: tag#694 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 858.878415][ C1] sd 0:0:1:0: tag#694 CDB[20]: ba 01:59:03 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x572b0000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:03 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x15, 0x0, 0x0, 0x0, 0x0) 01:59:03 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0) 01:59:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:03 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x1203, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:03 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0x0) [ 859.459800][ C1] sd 0:0:1:0: tag#695 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 859.469559][ C1] sd 0:0:1:0: tag#695 CDB: opcode=0xe5 (vendor) [ 859.475832][ C1] sd 0:0:1:0: tag#695 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 859.484798][ C1] sd 0:0:1:0: tag#695 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 859.493750][ C1] sd 0:0:1:0: tag#695 CDB[20]: ba 01:59:03 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x572b0000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:03 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0x0) 01:59:03 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x17, 0x0, 0x0, 0x0, 0x0) 01:59:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:03 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x18, 0x0, 0x0, 0x0, 0x0) 01:59:03 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0x0) [ 859.794127][ C1] sd 0:0:1:0: tag#696 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 859.803925][ C1] sd 0:0:1:0: tag#696 CDB: opcode=0xe5 (vendor) [ 859.810188][ C1] sd 0:0:1:0: tag#696 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 859.819135][ C1] sd 0:0:1:0: tag#696 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 859.828099][ C1] sd 0:0:1:0: tag#696 CDB[20]: ba 01:59:04 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xff600000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:04 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0x0) 01:59:04 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x19, 0x0, 0x0, 0x0, 0x0) 01:59:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:04 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x2b57, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:04 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1a, 0x0, 0x0, 0x0, 0x0) [ 860.419206][ C0] sd 0:0:1:0: tag#697 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 860.428996][ C0] sd 0:0:1:0: tag#697 CDB: opcode=0xe5 (vendor) [ 860.435267][ C0] sd 0:0:1:0: tag#697 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 860.444215][ C0] sd 0:0:1:0: tag#697 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 860.453156][ C0] sd 0:0:1:0: tag#697 CDB[20]: ba 01:59:04 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xff600000, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:04 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0x0) 01:59:04 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1b, 0x0, 0x0, 0x0, 0x0) 01:59:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 860.775429][ C1] sd 0:0:1:0: tag#699 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 860.785208][ C1] sd 0:0:1:0: tag#699 CDB: opcode=0xe5 (vendor) [ 860.791480][ C1] sd 0:0:1:0: tag#699 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 860.800411][ C1] sd 0:0:1:0: tag#699 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 860.809382][ C1] sd 0:0:1:0: tag#699 CDB[20]: ba 01:59:04 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xffffffff, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:04 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1c, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:05 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1d, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x4000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:05 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1e, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x21, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x22, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x15, 0x0, 0x0, 0x0, 0x0) [ 861.370368][ C1] sd 0:0:1:0: tag#700 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 861.380135][ C1] sd 0:0:1:0: tag#700 CDB: opcode=0xe5 (vendor) [ 861.386409][ C1] sd 0:0:1:0: tag#700 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 861.395382][ C1] sd 0:0:1:0: tag#700 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 861.404342][ C1] sd 0:0:1:0: tag#700 CDB[20]: ba 01:59:05 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x23, 0x0, 0x0, 0x0, 0x0) 01:59:05 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:05 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:06 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x24, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x17, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x4200, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:06 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x7, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:06 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x25, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x18, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x26, 0x0, 0x0, 0x0, 0x0) [ 862.395399][ C1] sd 0:0:1:0: tag#701 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 862.405179][ C1] sd 0:0:1:0: tag#701 CDB: opcode=0xe5 (vendor) [ 862.411447][ C1] sd 0:0:1:0: tag#701 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 862.420375][ C1] sd 0:0:1:0: tag#701 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 862.429358][ C1] sd 0:0:1:0: tag#701 CDB[20]: ba 01:59:06 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x27, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x19, 0x0, 0x0, 0x0, 0x0) 01:59:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 862.565360][ C0] sd 0:0:1:0: tag#702 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 862.575119][ C0] sd 0:0:1:0: tag#702 CDB: opcode=0xe5 (vendor) [ 862.581377][ C0] sd 0:0:1:0: tag#702 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 862.590311][ C0] sd 0:0:1:0: tag#702 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 862.599262][ C0] sd 0:0:1:0: tag#702 CDB[20]: ba 01:59:07 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:07 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x28, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1a, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:07 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x572b, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:07 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:07 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x29, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1b, 0x0, 0x0, 0x0, 0x0) [ 863.094441][ C1] sd 0:0:1:0: tag#703 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 863.104198][ C1] sd 0:0:1:0: tag#703 CDB: opcode=0xe5 (vendor) [ 863.110438][ C1] sd 0:0:1:0: tag#703 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 863.119449][ C1] sd 0:0:1:0: tag#703 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 863.128413][ C1] sd 0:0:1:0: tag#703 CDB[20]: ba 01:59:07 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1c, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:07 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2b, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:07 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1d, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0x0) 01:59:07 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x1e, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x60ff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x21, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2d, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:08 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x14, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x14, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x22, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x182, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2e, 0x0, 0x0, 0x0, 0x0) [ 864.344539][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 864.344564][ C0] sd 0:0:1:0: tag#641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 864.360922][ C0] sd 0:0:1:0: tag#641 CDB: opcode=0xe5 (vendor) [ 864.367166][ C0] sd 0:0:1:0: tag#641 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 864.376108][ C0] sd 0:0:1:0: tag#641 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 864.385049][ C0] sd 0:0:1:0: tag#641 CDB[20]: ba 01:59:08 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x23, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2f, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 864.566467][ C1] sd 0:0:1:0: tag#642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 864.576234][ C1] sd 0:0:1:0: tag#642 CDB: opcode=0xe5 (vendor) [ 864.582511][ C1] sd 0:0:1:0: tag#642 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 864.591483][ C1] sd 0:0:1:0: tag#642 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 864.600420][ C1] sd 0:0:1:0: tag#642 CDB[20]: ba 01:59:08 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x9700, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x24, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x30, 0x0, 0x0, 0x0, 0x0) 01:59:08 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x188, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:08 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x300, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x25, 0x0, 0x0, 0x0, 0x0) [ 865.044625][ C1] sd 0:0:1:0: tag#643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 865.054394][ C1] sd 0:0:1:0: tag#643 CDB: opcode=0xe5 (vendor) [ 865.060635][ C1] sd 0:0:1:0: tag#643 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 865.069594][ C1] sd 0:0:1:0: tag#643 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 865.078556][ C1] sd 0:0:1:0: tag#643 CDB[20]: ba 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x31, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x26, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x32, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x27, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x33, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x104000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x28, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x34, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x500, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:09 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x300, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x35, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x29, 0x0, 0x0, 0x0, 0x0) [ 865.690061][ C0] sd 0:0:1:0: tag#666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 865.699857][ C0] sd 0:0:1:0: tag#666 CDB: opcode=0xe5 (vendor) [ 865.706127][ C0] sd 0:0:1:0: tag#666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 865.715090][ C0] sd 0:0:1:0: tag#666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 865.724028][ C0] sd 0:0:1:0: tag#666 CDB[20]: ba 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x36, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2b, 0x0, 0x0, 0x0, 0x0) 01:59:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 865.914703][ C1] sd 0:0:1:0: tag#671 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 865.924491][ C1] sd 0:0:1:0: tag#671 CDB: opcode=0xe5 (vendor) [ 865.930758][ C1] sd 0:0:1:0: tag#671 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 865.939699][ C1] sd 0:0:1:0: tag#671 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 865.948650][ C1] sd 0:0:1:0: tag#671 CDB[20]: ba 01:59:10 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x105400, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:10 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x37, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:10 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x500, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:10 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2b00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:10 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x38, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2d, 0x0, 0x0, 0x0, 0x0) [ 866.420999][ C1] sd 0:0:1:0: tag#672 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 866.430875][ C1] sd 0:0:1:0: tag#672 CDB: opcode=0xe5 (vendor) [ 866.437124][ C1] sd 0:0:1:0: tag#672 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 866.446074][ C1] sd 0:0:1:0: tag#672 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 866.455036][ C1] sd 0:0:1:0: tag#672 CDB[20]: ba 01:59:10 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x39, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2e, 0x0, 0x0, 0x0, 0x0) 01:59:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:10 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x2f, 0x0, 0x0, 0x0, 0x0) [ 866.595299][ C0] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 866.605159][ C0] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 866.611421][ C0] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 866.620358][ C0] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 866.629325][ C0] sd 0:0:1:0: tag#673 CDB[20]: ba 01:59:11 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x400000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3a, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x30, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:11 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2b57, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2b00, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x31, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3b, 0x0, 0x0, 0x0, 0x0) [ 867.101989][ C0] sd 0:0:1:0: tag#674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 867.111770][ C0] sd 0:0:1:0: tag#674 CDB: opcode=0xe5 (vendor) [ 867.118019][ C0] sd 0:0:1:0: tag#674 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 867.126985][ C0] sd 0:0:1:0: tag#674 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 867.135946][ C0] sd 0:0:1:0: tag#674 CDB[20]: ba 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3c, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x32, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3d, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x33, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x401000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x34, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3e, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2b57, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2d000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x35, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x41, 0x0, 0x0, 0x0, 0x0) [ 867.732022][ C1] sd 0:0:1:0: tag#675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 867.741790][ C1] sd 0:0:1:0: tag#675 CDB: opcode=0xe5 (vendor) [ 867.748033][ C1] sd 0:0:1:0: tag#675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 867.757036][ C1] sd 0:0:1:0: tag#675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 867.765993][ C1] sd 0:0:1:0: tag#675 CDB[20]: ba 01:59:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x42, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x36, 0x0, 0x0, 0x0, 0x0) 01:59:11 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x43, 0x0, 0x0, 0x0, 0x0) [ 867.913489][ C1] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 867.923262][ C1] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 867.929515][ C1] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 867.938470][ C1] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 867.947424][ C1] sd 0:0:1:0: tag#676 CDB[20]: ba 01:59:12 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x4af000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:12 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x37, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x44, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:12 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2d000, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:12 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x38, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x45, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:12 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x39, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x46, 0x0, 0x0, 0x0, 0x0) 01:59:12 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3a, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x4fd000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:13 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x47, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3b, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:13 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:13 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x48, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3c, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:13 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3d, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x49, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x3e, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x541000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:13 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4a, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:13 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x41, 0x0, 0x0, 0x0, 0x0) 01:59:13 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x1001]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:13 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:14 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4b, 0x0, 0x0, 0x0, 0x0) [ 869.972329][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 869.972352][ C1] sd 0:0:1:0: tag#681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 869.988697][ C1] sd 0:0:1:0: tag#681 CDB: opcode=0xe5 (vendor) [ 869.994954][ C1] sd 0:0:1:0: tag#681 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 870.003898][ C1] sd 0:0:1:0: tag#681 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 870.012869][ C1] sd 0:0:1:0: tag#681 CDB[20]: ba 01:59:14 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x42, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x43, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4c, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:14 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x44, 0x0, 0x0, 0x0, 0x0) [ 870.210527][ C0] sd 0:0:1:0: tag#682 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 870.220429][ C0] sd 0:0:1:0: tag#682 CDB: opcode=0xe5 (vendor) [ 870.226692][ C0] sd 0:0:1:0: tag#682 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 870.235668][ C0] sd 0:0:1:0: tag#682 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 870.244634][ C0] sd 0:0:1:0: tag#682 CDB[20]: ba 01:59:14 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x800000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:14 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4d, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x45, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x42) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:14 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x1202]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:14 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4e, 0x0, 0x0, 0x0, 0x0) 01:59:14 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x46, 0x0, 0x0, 0x0, 0x0) [ 870.900109][ C0] sd 0:0:1:0: tag#689 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 870.909898][ C0] sd 0:0:1:0: tag#689 CDB: opcode=0xe5 (vendor) [ 870.916163][ C0] sd 0:0:1:0: tag#689 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 870.925150][ C0] sd 0:0:1:0: tag#689 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 870.934126][ C0] sd 0:0:1:0: tag#689 CDB[20]: ba 01:59:15 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4f, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x47, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x50, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x48, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x970000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:15 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x49, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:15 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x51, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x204) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:15 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x1302]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:15 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4a, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x52, 0x0, 0x0, 0x0, 0x0) [ 871.690797][ C0] sd 0:0:1:0: tag#690 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 871.700560][ C0] sd 0:0:1:0: tag#690 CDB: opcode=0xe5 (vendor) [ 871.706809][ C0] sd 0:0:1:0: tag#690 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 871.715770][ C0] sd 0:0:1:0: tag#690 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 871.724724][ C0] sd 0:0:1:0: tag#690 CDB[20]: ba 01:59:15 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x2b57]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:15 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4b, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x53, 0x0, 0x0, 0x0, 0x0) 01:59:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 871.964791][ C0] sd 0:0:1:0: tag#691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 871.974571][ C0] sd 0:0:1:0: tag#691 CDB: opcode=0xe5 (vendor) [ 871.980847][ C0] sd 0:0:1:0: tag#691 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 871.989771][ C0] sd 0:0:1:0: tag#691 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 871.998741][ C0] sd 0:0:1:0: tag#691 CDB[20]: ba 01:59:16 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xc04a01, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:16 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) 01:59:16 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4c, 0x0, 0x0, 0x0, 0x0) 01:59:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:16 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x247) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:16 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x3c02]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:16 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x55, 0x0, 0x0, 0x0, 0x0) 01:59:16 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x56, 0x0, 0x0, 0x0, 0x0) 01:59:16 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x100000]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:16 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4d, 0x0, 0x0, 0x0, 0x0) [ 872.660587][ C1] sd 0:0:1:0: tag#692 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 872.670361][ C1] sd 0:0:1:0: tag#692 CDB: opcode=0xe5 (vendor) [ 872.676874][ C1] sd 0:0:1:0: tag#692 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 872.685833][ C1] sd 0:0:1:0: tag#692 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 872.694807][ C1] sd 0:0:1:0: tag#692 CDB[20]: ba 01:59:16 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4e, 0x0, 0x0, 0x0, 0x0) 01:59:16 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x57, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xd04f00, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:17 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x4f, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:17 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x58, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x402) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:17 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x2b57) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:17 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x50, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x59, 0x0, 0x0, 0x0, 0x0) [ 873.433975][ C0] sd 0:0:1:0: tag#693 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 873.443774][ C0] sd 0:0:1:0: tag#693 CDB: opcode=0xe5 (vendor) [ 873.450063][ C0] sd 0:0:1:0: tag#693 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 873.459021][ C0] sd 0:0:1:0: tag#693 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 873.467985][ C0] sd 0:0:1:0: tag#693 CDB[20]: ba 01:59:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:17 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x51, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x52, 0x0, 0x0, 0x0, 0x0) 01:59:17 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5a, 0x0, 0x0, 0x0, 0x0) [ 873.573007][ C0] sd 0:0:1:0: tag#694 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 873.582799][ C0] sd 0:0:1:0: tag#694 CDB: opcode=0xe5 (vendor) [ 873.589059][ C0] sd 0:0:1:0: tag#694 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 873.598011][ C0] sd 0:0:1:0: tag#694 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 873.606975][ C0] sd 0:0:1:0: tag#694 CDB[20]: ba 01:59:18 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xf04a00, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:18 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x53, 0x0, 0x0, 0x0, 0x0) 01:59:18 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5b, 0x0, 0x0, 0x0, 0x0) 01:59:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:18 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x406) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:18 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r8, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x14}, 0x1) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 874.271511][ C1] sd 0:0:1:0: tag#695 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 874.281385][ C1] sd 0:0:1:0: tag#695 CDB: opcode=0xe5 (vendor) [ 874.287652][ C1] sd 0:0:1:0: tag#695 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 874.296641][ C1] sd 0:0:1:0: tag#695 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 874.305615][ C1] sd 0:0:1:0: tag#695 CDB[20]: ba 01:59:18 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) 01:59:18 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x55, 0x0, 0x0, 0x0, 0x0) 01:59:18 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0x0) 01:59:18 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x604) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:18 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x56, 0x0, 0x0, 0x0, 0x0) [ 874.508777][ C1] sd 0:0:1:0: tag#696 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 874.518553][ C1] sd 0:0:1:0: tag#696 CDB: opcode=0xe5 (vendor) [ 874.524822][ C1] sd 0:0:1:0: tag#696 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 874.533822][ C1] sd 0:0:1:0: tag#696 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 874.542801][ C1] sd 0:0:1:0: tag#696 CDB[20]: ba 01:59:19 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x1000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5d, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x57, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:19 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) ptrace$setregs(0xffffffffffffffff, r4, 0x39, &(0x7f00000003c0)="8ef7f636ce2a6b0bfcc323e9a9a8e0fffc4c1180eedb9a9c8a8031b400daefc6d694c0cac308ae9c74e170dff873d1da2e01a5bcd8e624b93756dea4b63260dbfb246878ef1db2d54034599868a075a991771b9f88ba936a9acd6a35ae1be44a743c0554393d697c3e5bd6fe01ed6f98b54ec2c46f2c24f737a391cf3e8da037db75532b182f1c7ef928092049c670a1f61d") r5 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002b80)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000480)="5fbfb219f82b08ec221ced4844d05ca6f56b82fc66c745143e92dc2c03209919774948a98281c894112391637d230b64b8c9c79a04378434512099a9e6ff8c363110ea5d3f6e3439c6740c656f9c340886f11d28ee75ad09be54f4270af29acc8d0986b4c7228852f98f91597dad25a758a08ed1556493cdaca0287f2d", 0x7d}, {&(0x7f0000000500)="c2e1a976e1d324825c43ce8043bf0cda3f9fe3e38ffd66b8b3adcfddf063f3fa7a1127d98ee477f10fcbc71764f401b8ed1c18e963bfdde07b6e3022b72405a437f50fadca12d747459657269c198f58e15df330724e413e3ea708187e188e6507556acf61b9cb11c28b393c759b6d2d1932df85b6e165691d57b16fd52e5fc15de3cea5187d4e1016f7f9", 0x8b}, {&(0x7f00000005c0)="0a486a6189ea0e2c44d2cb18dec421e99593daa76892c17a81559822b884c191207d4e2fc77c2f4c35acc3484aa2ab62efc248efc84f227f10e72579d180a3daad1e0f66c2fd26e37d521e341eb012903f90eb76a0edcdfa94ff13a13ea0997114390470", 0x64}, {&(0x7f0000000640)="189f1b65a3aa13513e67a666f498fc6b7221934660f7987882a73b0911004d34d597e407d79569b6320495c5e64a5ae2551c1017433dbdd10ddf8ba6bb4cffea77529c2fcbaa53cc59877c6e2e2adf64a676d4c830d29d0cef83187cffba169da1b8aabe1962620b830d7093b533dcd0be3b5a709f2c7ecee26b8e5fa265da60ef3e382c126c6c5f3a2da110ee74bc9c7ee79aca1c025f822418485535a9e20a43e3a859f5ac7e7a3b6655d1dcfd5957c03803ed3c93f2d70c9aead20d1f4628796d4af65cf6639262eb54ad734c5afecd959c383a03dc", 0xd7}, {&(0x7f0000000740)="0c40bf02de3428d20014c7482d7a40570cdec17fba282fd09f6f0b7d63816f3635fb6e7207b4130ed291efce41c0338b8c834c192135a0acb03ff60727365da220702d8f9d33f0a773b4df09de9705b8d84cf46e40bb680e5d58143d0506eb3b8a86e30e39cf8f5eda640c6a47af6cda6d942c6f142172c94b2cc1242700f201df1cfc008043f8732274f1af000ec87b46fa25759be9c22315ee8c99a522175e4c0f7698c3da3777ef073f7d1de2c1dde6a0867bf3bed7e14d03f429d06160f21bbd28d7d77b7a5f6308fb3fba8388c9503e64e273f5e28a293fb01c4897099347b2c40d6fa799fe", 0xe8}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="b5d7426fb940cb4153d1a5b18c16d8157e87a0973d4f36e5a8e347ea2647d9c917e2b142012740caaf49c66dbcba3818d72b28517025017c834e649c312c", 0x3e}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="dc7a915bb4a1f17b8d281c6efc6aee0f0f4130baccacb7f2f41c028f7f2e39f4a73fe80479647f2c935b595a76e215e44126578a2f8078d7c107e2de1bef2b48dfd4d7aca1ffc916eb86403305885859263324726c6e48d0774197bce7c7494cf6c656a02484adc39beeca6c69d9dea4ba0a91d866641816adae5af2c2038b67f752188f14c6753d8f8507d330837fb1108628848121a2fddf1f7322f75c7610a314a256ff3506ab118200ee81d4639d8f5c859299e22af6b7ae2e4c126cffda52a3bb163e2fcd4bfa4b8863d7239eeabfea6ec1371f1b962a0a22ceade9", 0xde}, {&(0x7f0000002980)="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", 0xfb}], 0xa}, 0x0, 0x80, 0x1}, 0x3) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) connect$unix(r6, &(0x7f0000000340)=@file={0x4b07298fc36210a0, './file0\x00'}, 0x6e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x3, 0x6, 0xe1, 0x8, 0x0, 0x71e3c0c4, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0x2}, 0x80, 0x80000000, 0x7, 0x6, 0x4, 0x7, 0x1, 0x0, 0x80, 0x0, 0x81}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) 01:59:19 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x700) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x58, 0x0, 0x0, 0x0, 0x0) [ 875.176678][ C1] sd 0:0:1:0: tag#697 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 875.186451][ C1] sd 0:0:1:0: tag#697 CDB: opcode=0xe5 (vendor) [ 875.192731][ C1] sd 0:0:1:0: tag#697 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 875.201687][ C1] sd 0:0:1:0: tag#697 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 875.210886][ C1] sd 0:0:1:0: tag#697 CDB[20]: ba 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5e, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5f, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x59, 0x0, 0x0, 0x0, 0x0) [ 875.350365][ C1] sd 0:0:1:0: tag#698 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 875.360127][ C1] sd 0:0:1:0: tag#698 CDB: opcode=0xe5 (vendor) [ 875.366370][ C1] sd 0:0:1:0: tag#698 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 875.375331][ C1] sd 0:0:1:0: tag#698 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 875.384271][ C1] sd 0:0:1:0: tag#698 CDB[20]: ba 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x60, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x14ac000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5a, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x61, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r5, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000180)={r5}) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x6, 'ip6erspan0\x00', {0x2}, 0x5}) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:19 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x2b57) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5b, 0x0, 0x0, 0x0, 0x0) [ 875.860066][ C1] sd 0:0:1:0: tag#702 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 875.869821][ C1] sd 0:0:1:0: tag#702 CDB: opcode=0xe5 (vendor) [ 875.876052][ C1] sd 0:0:1:0: tag#702 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 875.885017][ C1] sd 0:0:1:0: tag#702 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 875.893975][ C1] sd 0:0:1:0: tag#702 CDB[20]: ba 01:59:19 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x62, 0x0, 0x0, 0x0, 0x0) 01:59:19 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:20 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5d, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x63, 0x0, 0x0, 0x0, 0x0) [ 876.065164][ C1] sd 0:0:1:0: tag#703 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 876.074947][ C1] sd 0:0:1:0: tag#703 CDB: opcode=0xe5 (vendor) [ 876.081215][ C1] sd 0:0:1:0: tag#703 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 876.090169][ C1] sd 0:0:1:0: tag#703 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 876.099193][ C1] sd 0:0:1:0: tag#703 CDB[20]: ba 01:59:20 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x2000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:20 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x64, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5e, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:20 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd_index=0x6, 0x5, &(0x7f0000000480)=""/141, 0x8d, 0x24, 0x0, {0x0, r3}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="0d11c33b5f43d0b64f12057311280148b516dc0a84aaaa344ec8204cc92f3379304d71e87d7bac795c446cc692a7d9182826dd027d6f921a7fb0c5c6c7c59c3710b618ea4c920d14f53a4f9530cc6bd4cde9018fb2c85caa8a029279efacc936b097b2d4e59c5440b48b78a5b1427532d3f5e2f376a3e183beaf264321bf5cc44fd942cb4091440fa7f948e2a104c34ca7ee8458ae43b3c18b5ede", 0x9b, 0x4080, 0x0, {0x0, r4}}, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b59, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_io_uring_setup(0x57b5, &(0x7f0000000180)={0x0, 0x5acc, 0x4, 0x3, 0x34d}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000340)) 01:59:20 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x5f, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000180)=""/26, 0x1a}) tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:20 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x65, 0x0, 0x0, 0x0, 0x0) [ 876.725391][ C0] sd 0:0:1:0: tag#640 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 876.735161][ C0] sd 0:0:1:0: tag#640 CDB: opcode=0xe5 (vendor) [ 876.741433][ C0] sd 0:0:1:0: tag#640 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 876.750395][ C0] sd 0:0:1:0: tag#640 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 876.759433][ C0] sd 0:0:1:0: tag#640 CDB[20]: ba 01:59:20 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x60, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x66, 0x0, 0x0, 0x0, 0x0) 01:59:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 877.003598][ C0] sd 0:0:1:0: tag#641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 877.013356][ C0] sd 0:0:1:0: tag#641 CDB: opcode=0xe5 (vendor) [ 877.019597][ C0] sd 0:0:1:0: tag#641 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 877.028543][ C0] sd 0:0:1:0: tag#641 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 877.037479][ C0] sd 0:0:1:0: tag#641 CDB[20]: ba 01:59:21 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x2040000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:21 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x67, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x61, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4200) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:21 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x62, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() io_uring_enter(r0, 0x3ca1, 0xf501, 0x0, &(0x7f0000000180)={[0x5]}, 0x8) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000200)={0x38, 0x6, 0x48, 0x5, 0x4, 0x3, 0x3, 0x47, 0xfff, 0x7f}, 0x0) 01:59:21 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x63, 0x0, 0x0, 0x0, 0x0) [ 877.434905][ C1] sd 0:0:1:0: tag#642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 877.444667][ C1] sd 0:0:1:0: tag#642 CDB: opcode=0xe5 (vendor) [ 877.450936][ C1] sd 0:0:1:0: tag#642 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 877.459878][ C1] sd 0:0:1:0: tag#642 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 877.468824][ C1] sd 0:0:1:0: tag#642 CDB[20]: ba 01:59:21 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x68, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x64, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x69, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:21 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x6040000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:21 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6a, 0x0, 0x0, 0x0, 0x0) 01:59:21 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x65, 0x0, 0x0, 0x0, 0x0) [ 877.649862][ C0] sd 0:0:1:0: tag#643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 877.659648][ C0] sd 0:0:1:0: tag#643 CDB: opcode=0xe5 (vendor) [ 877.665883][ C0] sd 0:0:1:0: tag#643 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 877.674826][ C0] sd 0:0:1:0: tag#643 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 877.683758][ C0] sd 0:0:1:0: tag#643 CDB[20]: ba 01:59:22 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4702) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:22 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x66, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6b, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) gettid() capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x7, 0x7, 0x6c, 0x8, 0x9, 0x5}) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:22 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x7000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:22 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6c, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x67, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x572b) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:22 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6d, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x68, 0x0, 0x0, 0x0, 0x0) [ 878.490318][ C1] sd 0:0:1:0: tag#644 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 878.500087][ C1] sd 0:0:1:0: tag#644 CDB: opcode=0xe5 (vendor) [ 878.506341][ C1] sd 0:0:1:0: tag#644 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 878.515299][ C1] sd 0:0:1:0: tag#644 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 878.524255][ C1] sd 0:0:1:0: tag#644 CDB[20]: ba 01:59:22 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() io_uring_enter(r0, 0x694b, 0x15ab, 0x2, &(0x7f0000000180)={[0x4]}, 0x8) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:22 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6e, 0x0, 0x0, 0x0, 0x0) 01:59:22 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x69, 0x0, 0x0, 0x0, 0x0) [ 878.834514][ C0] sd 0:0:1:0: tag#645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 878.844289][ C0] sd 0:0:1:0: tag#645 CDB: opcode=0xe5 (vendor) [ 878.850551][ C0] sd 0:0:1:0: tag#645 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 878.859585][ C0] sd 0:0:1:0: tag#645 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 878.868532][ C0] sd 0:0:1:0: tag#645 CDB[20]: ba 01:59:22 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6f, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xf000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:23 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x70, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6a, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:23 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x60ff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:23 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6b, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x71, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:23 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6c, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:23 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6d, 0x0, 0x0, 0x0, 0x0) 01:59:23 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 01:59:24 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x10000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:24 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6e, 0x0, 0x0, 0x0, 0x0) 01:59:24 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x73, 0x0, 0x0, 0x0, 0x0) 01:59:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:24 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:24 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x9700) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:24 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x6f, 0x0, 0x0, 0x0, 0x0) [ 880.328868][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 880.328898][ C1] sd 0:0:1:0: tag#648 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 880.345242][ C1] sd 0:0:1:0: tag#648 CDB: opcode=0xe5 (vendor) [ 880.351535][ C1] sd 0:0:1:0: tag#648 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 880.360508][ C1] sd 0:0:1:0: tag#648 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 880.369458][ C1] sd 0:0:1:0: tag#648 CDB[20]: ba 01:59:24 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 01:59:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:24 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x75, 0x0, 0x0, 0x0, 0x0) 01:59:24 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x70, 0x0, 0x0, 0x0, 0x0) [ 880.539994][ C1] sd 0:0:1:0: tag#649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 880.549752][ C1] sd 0:0:1:0: tag#649 CDB: opcode=0xe5 (vendor) [ 880.556024][ C1] sd 0:0:1:0: tag#649 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 880.565149][ C1] sd 0:0:1:0: tag#649 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 880.574110][ C1] sd 0:0:1:0: tag#649 CDB[20]: ba 01:59:24 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x76, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x12030000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:25 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x71, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:25 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x77, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x104000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:25 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = fcntl$dupfd(r0, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x8, 0x12, r6, 0x0) tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r8, 0x0, 0x0) close_range(r3, r8, 0x0) 01:59:25 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x78, 0x0, 0x0, 0x0, 0x0) [ 881.208171][ C1] sd 0:0:1:0: tag#650 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 881.217974][ C1] sd 0:0:1:0: tag#650 CDB: opcode=0xe5 (vendor) [ 881.224504][ C1] sd 0:0:1:0: tag#650 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 881.233479][ C1] sd 0:0:1:0: tag#650 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 881.242454][ C1] sd 0:0:1:0: tag#650 CDB[20]: ba 01:59:25 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x73, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x79, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:25 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 881.410076][ C1] sd 0:0:1:0: tag#651 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 881.419845][ C1] sd 0:0:1:0: tag#651 CDB: opcode=0xe5 (vendor) [ 881.426089][ C1] sd 0:0:1:0: tag#651 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 881.435042][ C1] sd 0:0:1:0: tag#651 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 881.444000][ C1] sd 0:0:1:0: tag#651 CDB[20]: ba 01:59:25 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x40000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:25 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5, 0x8000000000000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:25 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7a, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x75, 0x0, 0x0, 0x0, 0x0) 01:59:25 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x105400) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7b, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x76, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7c, 0x0, 0x0, 0x0, 0x0) [ 882.035060][ C0] sd 0:0:1:0: tag#652 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 882.044823][ C0] sd 0:0:1:0: tag#652 CDB: opcode=0xe5 (vendor) [ 882.051128][ C0] sd 0:0:1:0: tag#652 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 882.060172][ C0] sd 0:0:1:0: tag#652 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 882.069133][ C0] sd 0:0:1:0: tag#652 CDB[20]: ba 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x77, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x78, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7d, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x42000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:26 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x400000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x79, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7e, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x7d0, 0x5, 0x0, 0xf6fa}]}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0xc20c6000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd, 0xffffffffffffffff}, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r8, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f0000000340)={0x200, 0x81, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x4) sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7a, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7b, 0x0, 0x0, 0x0, 0x0) [ 882.788072][ C1] sd 0:0:1:0: tag#653 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 882.797844][ C1] sd 0:0:1:0: tag#653 CDB: opcode=0xe5 (vendor) [ 882.804107][ C1] sd 0:0:1:0: tag#653 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 882.813083][ C1] sd 0:0:1:0: tag#653 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 882.822056][ C1] sd 0:0:1:0: tag#653 CDB[20]: ba 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x82, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7c, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x83, 0x0, 0x0, 0x0, 0x0) 01:59:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:27 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7d, 0x0, 0x0, 0x0, 0x0) [ 883.037064][ C0] sd 0:0:1:0: tag#654 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 883.046841][ C0] sd 0:0:1:0: tag#654 CDB: opcode=0xe5 (vendor) [ 883.053110][ C0] sd 0:0:1:0: tag#654 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 883.062078][ C0] sd 0:0:1:0: tag#654 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 883.071038][ C0] sd 0:0:1:0: tag#654 CDB[20]: ba 01:59:27 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x572b0000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:27 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x84, 0x0, 0x0, 0x0, 0x0) 01:59:27 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x7e, 0x0, 0x0, 0x0, 0x0) 01:59:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:27 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x33ae, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = io_uring_setup(0x4a87, &(0x7f0000000180)={0x0, 0x3a61, 0x10, 0x1, 0x17f, 0x0, r0}) io_uring_enter(r6, 0x4ac9, 0x4cc0, 0x2, &(0x7f0000000200), 0x8) 01:59:27 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x401000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:27 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x85, 0x0, 0x0, 0x0, 0x0) 01:59:27 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x82, 0x0, 0x0, 0x0, 0x0) [ 883.673314][ C0] sd 0:0:1:0: tag#655 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 883.683094][ C0] sd 0:0:1:0: tag#655 CDB: opcode=0xe5 (vendor) [ 883.689358][ C0] sd 0:0:1:0: tag#655 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 883.698381][ C0] sd 0:0:1:0: tag#655 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 883.707350][ C0] sd 0:0:1:0: tag#655 CDB[20]: ba 01:59:27 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x86, 0x0, 0x0, 0x0, 0x0) 01:59:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:27 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x83, 0x0, 0x0, 0x0, 0x0) 01:59:27 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x87, 0x0, 0x0, 0x0, 0x0) [ 883.865303][ C0] sd 0:0:1:0: tag#656 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 883.875089][ C0] sd 0:0:1:0: tag#656 CDB: opcode=0xe5 (vendor) [ 883.881354][ C0] sd 0:0:1:0: tag#656 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 883.890310][ C0] sd 0:0:1:0: tag#656 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 883.899259][ C0] sd 0:0:1:0: tag#656 CDB[20]: ba 01:59:28 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xff600000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:28 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x84, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x88, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:28 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4af000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:28 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:28 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x85, 0x0, 0x0, 0x0, 0x0) [ 884.542572][ C1] sd 0:0:1:0: tag#657 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 884.552338][ C1] sd 0:0:1:0: tag#657 CDB: opcode=0xe5 (vendor) [ 884.558584][ C1] sd 0:0:1:0: tag#657 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 884.567565][ C1] sd 0:0:1:0: tag#657 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 884.576529][ C1] sd 0:0:1:0: tag#657 CDB[20]: ba 01:59:28 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x89, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x86, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x87, 0x0, 0x0, 0x0, 0x0) 01:59:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:28 executing program 0: syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x34) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x3666548cfe99130a, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000100), &(0x7f0000000240)=""/168, 0x1c5e, 0x10022, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x4, 0x80, 0x0, 0xed, 0x2, 0x7, 0x0, 0x5, 0x1e044, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000004c80), 0x2}, 0x9200, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x0, 0x4, 0x1, 0x0, 0x4, 0x8601, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x4}, 0x0, 0x10000, 0x96, 0x3, 0x101, 0x400, 0x6, 0x0, 0x7fff, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) 01:59:29 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:29 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r7 = mmap$IORING_OFF_SQES(&(0x7f00006c8000/0x12000)=nil, 0x12000, 0x0, 0x20010, r0, 0x10000000) r8 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x8000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0xa5d) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) ptrace(0x11, r5) 01:59:29 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8a, 0x0, 0x0, 0x0, 0x0) 01:59:29 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x88, 0x0, 0x0, 0x0, 0x0) 01:59:29 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4fd000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:29 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x89, 0x0, 0x0, 0x0, 0x0) 01:59:29 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8b, 0x0, 0x0, 0x0, 0x0) [ 885.402917][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 885.402957][ C0] sd 0:0:1:0: tag#660 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 885.419418][ C0] sd 0:0:1:0: tag#660 CDB: opcode=0xe5 (vendor) [ 885.425684][ C0] sd 0:0:1:0: tag#660 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 885.434660][ C0] sd 0:0:1:0: tag#660 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 885.443624][ C0] sd 0:0:1:0: tag#660 CDB[20]: ba 01:59:29 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8a, 0x0, 0x0, 0x0, 0x0) 01:59:29 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8c, 0x0, 0x0, 0x0, 0x0) 01:59:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:29 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8d, 0x0, 0x0, 0x0, 0x0) [ 885.553189][ C1] sd 0:0:1:0: tag#661 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 885.562980][ C1] sd 0:0:1:0: tag#661 CDB: opcode=0xe5 (vendor) [ 885.569588][ C1] sd 0:0:1:0: tag#661 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 885.578518][ C1] sd 0:0:1:0: tag#661 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 885.587482][ C1] sd 0:0:1:0: tag#661 CDB[20]: ba 01:59:30 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8e, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8b, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:30 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x541000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:30 executing program 0: r0 = syz_io_uring_setup(0x77da, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x143}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r6, 0xffffffffffffffff}, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r7, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x1, 0x0, {0x0, 0x0, r7}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() tkill(r8, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:30 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8f, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() recvmmsg$unix(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f00000001c0)=""/111, 0x6f}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}], 0x1, 0x100, &(0x7f0000000740)) fcntl$lock(r3, 0x24, &(0x7f0000000780)={0x0, 0x3, 0x4, 0x9, r6}) tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) wait4(r5, &(0x7f0000000180), 0x1, &(0x7f0000000340)) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 886.363488][ C0] sd 0:0:1:0: tag#666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 886.373273][ C0] sd 0:0:1:0: tag#666 CDB: opcode=0xe5 (vendor) [ 886.379540][ C0] sd 0:0:1:0: tag#666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 886.388465][ C0] sd 0:0:1:0: tag#666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 886.397415][ C0] sd 0:0:1:0: tag#666 CDB[20]: ba 01:59:30 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8c, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x90, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8d, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x91, 0x0, 0x0, 0x0, 0x0) 01:59:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:30 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8e, 0x0, 0x0, 0x0, 0x0) [ 886.604936][ C1] sd 0:0:1:0: tag#667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 886.614747][ C1] sd 0:0:1:0: tag#667 CDB: opcode=0xe5 (vendor) [ 886.621012][ C1] sd 0:0:1:0: tag#667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 886.629960][ C1] sd 0:0:1:0: tag#667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 886.639035][ C1] sd 0:0:1:0: tag#667 CDB[20]: ba 01:59:31 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x8f, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x800000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:31 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0x2, &(0x7f0000000280)={0x0, 0x1fb}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x93, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x90, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x94, 0x0, 0x0, 0x0, 0x0) [ 887.167336][ C1] sd 0:0:1:0: tag#668 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 887.177127][ C1] sd 0:0:1:0: tag#668 CDB: opcode=0xe5 (vendor) [ 887.183392][ C1] sd 0:0:1:0: tag#668 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 887.192342][ C1] sd 0:0:1:0: tag#668 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 887.201289][ C1] sd 0:0:1:0: tag#668 CDB[20]: ba 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x91, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x95, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:31 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x96, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x93, 0x0, 0x0, 0x0, 0x0) 01:59:31 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r6, 0xffffffffffffffff}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4004, @fd_index=0x2, 0x6, &(0x7f0000001440)=[{&(0x7f0000000180)="a69ebbc06725985079747e3c124abae2387dcb52cd91dda4d0ce3b5435cbc6df27b32c9f0dff7edc3e3d69a2431a47739b96874b47561ba7285daecc604d77983b768d73917003ae3d8366c75f6a3f42122ef730ec93ec481f94f58d49a881312607404c91f49a550218ea5d5be185a15b20d5a835f7b02620530fc3f21619caedc40825df7f54d4fdc760e35fcee212298f15c0a7aa6c75148d4a18d4493cf6df8710552288f52a8752a96b5a4253ad58cd", 0xb2}, {&(0x7f0000000340)="34a699f3839f9f4a4de8ad3f20d20731d26bf14963238fbd00768d7c2f894c32ff3d5e6cb53d4f731c2a3667cc33bc73a8bc724f31debca181cb5799f363c0900ff5aeeab97d20a922ef7e32f1dfbf2fcdb09867f37e08bc79c9f5cd3a41663eb16e9fbe8085ceaaa0564a736cb94447298757a5eaacb081b3083e1ea1b368ccd47b6c90dc6c4dad9d210bcde0886a126bebce7dcdf3f209e3f0b83e4979e919abdf2e025ba5f1f170da332c7921a061016ddd1c9861246083d8bfc543fc523a0a2c70a335393a6fea73cd35ff2df168a5eac812e03715199c8a36207ecef8d8e62b2d3f292d86a4fb0f21b33dea9a8b015c0c381ce75feb2f1ed8d7d301c9bde279ea4e9358c89b2c467a12bc7cc634e48ed22e890550d88483c512cdffb7c39e2f3b42ec971c8c91360ab9d56ba1a449dc636e2d11377defff538612b2cf6caf728913634d63bfefd307984d9b5f0a2434bb3fe0e20e54f07450d5645a0c310a48b1728bef9734c79809f21abc92e8c3003d93fad014576812d3b9403d38916c1586a38e3e3e3b163eb29468a4e5661bba7db13951731e0894bcfad35801b19db33199703332ef0a969756fa09e10eb2fb58a28197b83cac5312b1f7ccef323fa63eab58ed96f026620072f1e30a52b8e66aae0dd87c55b75d0f64bd4a7547834c1226c0ad97629035c6adaef15f69db9468b0a5f08df1e43d224faa6ed62d784a7ca02eaa31076d6044df181f92be58387c0338f1b4aa21cda29be765b1bde40bae263e4df866f14e70891bf2df3718732d03a3d0f7ea6ea35f9acf96134b10bef0f0b846e581b9e5dedb9668d45762d9f9dbbccfa8a6129d2cd4b210dd93b1bd273edf7f2d5b3c9db371a76b8bdf9cfc9215951bad98aa5515387b66ef9126226cf3d14a4431819e799fecfdb0e04dde64b8814adfc0066ed7a5f72934f45ccaa4372f59fb960e86c7add99288ce62351a241879efacb90063d1976047927d52bad82850425893f6c77e6a3c1319ba964b2858086e4af96581a12559afdecd2576471a5a851a77c32bf0ec275de13352cadf1ab2b77b5248731027970b0a480a97c45597e2fecb186a9b714bcfd89b55661501520ab4e02c2688dc6a5a9cebc9dbb23c73609e1dee03a1c9d8cd56a7ad1d8f5d536694f1286fee5713cac56245b256312975f3fa90569d84692115a81df70dd8173115a092bcb2dc6026b7d14c278d33856ad4ec8db0e9507844c22184ecb1442f58b1de02b080705e2f290fd83f7eadb2a73eceb50feaa41d0b386e89909a0508c73330d5258c52bb6a6052d7f2c806e40acf930e06244156335828180a85193daeeb0a5e5b2b08e6c3931713a8a614afadb745c3f27d8e29490b93bbe6b5a93da7ab6b67b008bca3ce802e4039d96696438588abf9e9450ac0cb994bd7af988e798eae34bdfe49eed9fa9464eb3a134da1c211ea9f6d1a08a6be06a1ac195b0ed38e52dec96268617d0e7ed901bf0298433017e09e176be7bc13835577e88ab8c917fc2d53c0ec3e2051a3bad3dd3df5b6f6c9b8d61de0b77ca65acaf65747be1b59311cdf010b5a97995f25bd26b70a1f9e76e571d5d26e1e7eef4d4f607ee82f8ba28f29984e023629cdd0aa2afe3c964a004e8bcc735096489c3ddbe24fa49d16e22d4fde80b8681cf75e7a48e0ea8a81190eb0bbf42613cc394cb2af97ae8b1c6cc0e2b9351eeae5165056e9054799eb89bed0039793c56090a9283ec1c147570d5afc6ee47dbb6f2e00afb7ffed6e294ae4069c056d831b5f93f8bb2446574af36050f1127afe1d953d8207099424871575e19691d1bd3b30ae8904b403f95bc275bb37cd629b2311c07ad5699e676785195d349e7c7a37a4ca0159c771e23c969882c3711bc58a39f99d914310d340da271d40e7491f54a46e9aee8ff470093f3cc8fdb4ecc2c5b0f28f4bee29bce6729cb8514cda3332eec63abf79c1bfffca9c6d4e3f2c0b0947cbff8bd3de864d7aa531f2711c59ddd6ea60077e64d187736f3de3df3e15f88e4f940c0cc49897a638cad348a1cd1039ef6b526012ff2a13d6c18c1c1adee41861d9e634028377aa1ca9333179e10c6902029b185df877ed3a3f4062c7bdd438cf28d6f06900150d1c45a08befb529f9be9ab4c0c7219eff6f7159586fcdd6f3515cffa02e15ea58fa85914846d32735a0c39c45b7802fe671a1ea7c5565d54fd8559eb361bb3f1eb5f34a61166e2edff77523121049d2ce352119d76cfca878dea468f00bf66ae78f82c8ce31e75fd510a93620bc9e81749826662ec043b3b990a8ad3b31b782f3dfaae2055baac8665d0bea5ac2b70ec43bfe20b2cae9b20cf0853c57bcf2d6e069b3d935fc408e5fbfb489449cf6827acd651d31916efc98aac79dfd345b9a3f498c1d9b5be470c384a6dbcb271ec9b48639d52edf3a2c36f715235c7fb0761085ab93fb3b98cd3268c157ce638d2507d4b5f73567a3aedc132d00d8aea8f8c67806b290f80f5a1114b1777a8e80e2435cfbc558f40cac8873067b9e4a483aadaf2b65806b3c0622a501f4ad2b4b82aa3bb3bab0322be9788c89c8e3dea20aedb674397e42b5f57f7816165ffbb9c89a1a23d7c71c869c2e8eae7511813a93b7d5d127865b885c3c7199c9ae4755eacb38819542cc4f7d9d5818b3ca4443b3f7562eb738ebfc746242945cb0358c79f7af167745a07ebc89e0337489c12a3d2821709d9d2c028d7d0d4a4cae3af8886f622c25f5fb877988fd51f79917ddd1aa980d4d6650e5126a329857926e3d9bd7084641095d20956252d09504870e90656cd786b0621229f270b68ee41b7f7b127ed4ebc00645e09832f3953655b107cb38c626148e457a993c1bac65a9361b68035ce6f1a6f09da9a521be3c1326271b0d3043662605459bf4c6678d9e755c116e3c477f5e505568fb8c35f630a3f69e546ee533913f95ec7b28a226dc5690452cf6d7003b16eec4a74e07806010c6e5dfbaaec77d457f5ac8426e3c321f3903282e2a9754317bad987039f7c432aee450cacadb16f4841d60f45d6a4b7329259940ab0d9dc04b4cb7e047be6b74aa2eeaf9778eb3cf5eb3ff044585d294f8724a3b480a9ad57b6b21763a58a5a4e018f12bfa57dc5a5d8a313371b438995269d1ff3b0eaa039ea213dfd48949f0317a81eb4c9cb42687f26d3d2a57bc96d3cc648d8a5199141e1977ad0e4ad6f25fe4c65809e80095a59f4cbc38322dd82bd53056f8b7828bdd2461da19e0c1437664f520f742d516b3215081ece55adcdaad54e35f22a1523b3cb11723e63e1485e2bd023783182c82bd2a535b998456aaca544ba34cd6401ba81a7c0051ced51c094cdf87cf10962803761fc89500425423e0a413a3d329cdf36144e1b9856dcce92e8dae96d35a5321af8c1e644346dde9980a7afd07ff6d11a629d73c0d5561df99d2beedc3933fc363ce404277340fc552c2c193154ffdec627415c7bf664bcd4471c2a393f612ed05ea2582ad8f6f1999876ec7a659f7b5a2e5fdb5f8ec90a9988837270a1e66e13670900916c3e8e090f930ed1b70b06825e1c6ec81f9bff53d022bb65427922c63c45b48435e62c211eb4d0570791da2f044564f0fff82c4e27ebd489d95f610bdb86c871e5c1b7eab362a55636a7906f1e58574f4eb424785db94c134cb45abf33ffb3f65b92703b6a8c23ec8f9c4b5b0bf8ab04a8b21e3917a60329251d958c4c6e1a987e93d206532d02ec0ad40ce24345bdcbb285d6254230b3aa819c5c2b9c8d2802ee27f3b25760d0de628c34eade4834e0739e531587d3e0c3c9cece839484fb3929d9a8dd670d3fa04b157e7116a4ea1533e19ee80018a3ed994aac62fd0b048e6f96973fc6e0816d40fa4aa5d3fe2e9b55c74c0e3636284bc2b7658a9ff4f4829221129e94396d5e7556b1dc27e2efc7dc1f2d3da0888e4bc7924af6c6b6699807a6b0930850cc58ccf93b3a29e1c01ed247754ed0b422a5fcd034fd561f98ee8626953c31e8c674c3c3709ef9142b6784fd69c69f8d3df7cea5de6431c3d410ac7b8a7d50f2d2dd653e5bd59028ad231c59eed5bc091c2d36e981171e9f2b888766152398932e2bd70753a33dda6a2edfd4e32415d75a64574cf904f101ab6b995d5b245b346ad8ce35576d9dcaf1095b4c43c3d5df9263969e5eda2087e07a5b204397dfcca154c5845066439991d89afa6e66d5e40e3912cb5ce06da004fe3a762fa9393a45d68a7870b0a118a35b5b3e39801ab04dc71273053377ca3262f92460cca5d606a83293c1d81813c5d9e8a02abfca83059682718ceec03c1a6318c8644959b9b9d34b966862481322600cb48b07af228a0bb9ebc989ec721ca905d3d11db5cd3e9835782a534d317f17b790b01dcfa459686b21e6e79809b5879602f67969ae5ee502c5282c80908bf3bc9bcf5aa00c68154687f4881b44acd319388afd9a9c5013cf1108956c73801b70b3a43d0f6d1cf77b38033f2a064c5ff087cf9696bb3d811be7ac176d5840ea2fcdd5b8eda747b78d28e49b6d41b15cabdb87be5009bc21ffd1e96ad2cb9c993c79596b3dd2e5d6625b009cc46e32107c6cf0c193d8d0091d1fbd90262b6bb784109b61e9fcd4c772e6941d4dc92b81834ef090e0fb8eb043475de38bacbab5f15c49e8a08699d0670127666d035cefb3918d91ccfa3340bc00e2a393ba415e44a7b064620d97531de7f9657d5ca191f6a3f441f8308fcaf60491ad781b1d626041d20743ee08f14faaf2ca5841c41138ca3f54472cf2decf2d0e1eca87d18196c340a6f1e7ea16874dcbfee2ea3883aa6d3ed7ab6c55251e81c21e79eb638f1a8e876bb1cd325ce3f41e6eb4f552163205ffd625d5e1e0cafbd70c53556dd14d6a5e6f13c4b2fc36ea5bdddb4178fd55aa3b26bbb074bce5e8fe84b40a74dda68ab143c76c26e30b80f8f809fe4423ff419cf1fe5c0eccddc5fe4e673e9d01f55f910698ee4d27560624bea1c186f514df44f6a654c5a2fcca4421e84ed286ddc712c660836f154ea2218e7b6c1705e644e419a541db5f54b7677afffedbe7da22085375cb23561c08e1504398a88bd47450e9aea7d421cb9ea8aa8e10b7fcc030241ef235f7a23dfb380967ba7e1686c11e77ed5a863b9501830aee2e2bacc15389f9e74cb385404c0bce5ad4eaea59fb1caa50bbbb25bcffb01412055a35482574de0a35781f10e80bae9086846952fb9c3d28e05577c51e575b90340d19b6f213cf7a7f3e4d02b1d37f1608dd03d443d3b80d72b9b5c15f16dc7e574525992504db2313c5cb34da7119d960dd8e1631784bd0278ff6040426656b8a19c4d7938eac5f1b538a04e0f52844b38e8d99b4f627c1d67f591ef21d9216e2bba6b2ea9822adee0c52dbe165b173999b7e52558562d01ca56ef7381cf44a07f5437f3fa021fc8b183dba65543bd9321f5854dae39c3c55d43075c999177baf502cac7fd63ad6836f47086fbbf673a9a23b4bc0c1151a70f64ae99beeb3b612607f62d0a9bf0e872afd4ccc67e00e3b0ddf3e4ee546e42a8d7f8622efaf789c333f920a5f7ea7f80ed91db6552d60b3a740d94c676d1e89f06e13a28583b9ade8f4bb3502e01b21e19522b7e8bfad544545d3e6465afc7d4e0d6a00c0adf6e79a63c724ead59fe79940f39d4df9c6a6eaef92c7fca0478848d45cf6f8eaf53ceff80c9d9d2a09127473ea1262eb5acda05bdad779a48240fc2e75dbed587da284dbe7e81419fc74c2a6337adff8d38fe00150fe1143d3129af23bca6", 0x1000}, {&(0x7f0000001340)}, {&(0x7f0000001380)="903a94cdef70fa0ffe03016e29e3bf4951c31ae8dfb47f5f3a8a3bb6a76340", 0x1f}, {&(0x7f00000013c0)="18c8a798d2a469a884ad902a4750be1667c8fac266c115c919435463070026e872198798644ed0b1a5a1fdd2856b456fa5f00d9e68fa4a43767eeea12e80146a26b121770997877833348212807a3e2f40e168c19da77b650d33e28a0678", 0x5e}], 0x5, 0xc, 0x0, {0x1, r8}}, 0x9) r9 = gettid() tkill(r9, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x970000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:31 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x94, 0x0, 0x0, 0x0, 0x0) [ 887.938260][ C0] sd 0:0:1:0: tag#669 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 887.948035][ C0] sd 0:0:1:0: tag#669 CDB: opcode=0xe5 (vendor) [ 887.954311][ C0] sd 0:0:1:0: tag#669 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 887.963261][ C0] sd 0:0:1:0: tag#669 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 887.972224][ C0] sd 0:0:1:0: tag#669 CDB[20]: ba 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x97, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x95, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x98, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x96, 0x0, 0x0, 0x0, 0x0) [ 888.160845][ C1] sd 0:0:1:0: tag#670 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 888.170634][ C1] sd 0:0:1:0: tag#670 CDB: opcode=0xe5 (vendor) [ 888.176893][ C1] sd 0:0:1:0: tag#670 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.185865][ C1] sd 0:0:1:0: tag#670 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.194827][ C1] sd 0:0:1:0: tag#670 CDB[20]: ba 01:59:32 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:32 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x97, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x99, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xc04a01) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:32 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000700)={0x0, {{0xa, 0x4e22, 0xfffffad3, @loopback, 0x6}}, {{0xa, 0x7, 0x89b3, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}}}, 0x108) r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x3000009, 0x10, r0, 0x0) io_uring_enter(r0, 0x57cc, 0x5623, 0x1, &(0x7f00000006c0)={[0x3]}, 0x8) syz_io_uring_setup(0x2dc9, &(0x7f0000000340)={0x0, 0xc043, 0x20, 0x0, 0x1fd, 0x0, r0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000003c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000680)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4007, @fd_index=0x4, 0x902, &(0x7f0000000640)=[{&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000005c0)=""/120, 0x78}], 0x3, 0x0, 0x0, {0x0, r8}}, 0x5) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/sunrpc', 0x119300, 0x5b) 01:59:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:32 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x98, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9a, 0x0, 0x0, 0x0, 0x0) [ 888.777851][ C1] sd 0:0:1:0: tag#671 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 888.787652][ C1] sd 0:0:1:0: tag#671 CDB: opcode=0xe5 (vendor) [ 888.793914][ C1] sd 0:0:1:0: tag#671 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 888.802882][ C1] sd 0:0:1:0: tag#671 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 888.811823][ C1] sd 0:0:1:0: tag#671 CDB[20]: ba 01:59:32 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() clone(0x40000080, &(0x7f0000000180)="6e2221f0b4988b44a86de02ea4da4716d584e109e80eb5c67f1870d59c5ddf6ad66b7f1e46edbb7d21acd50565abf73a", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)="0e4a22f4f37f55b7e4ace99855df5335e8a7674bb14d3b98607f9b6dbb8de97f0446c6d68efbdc536f2cc78e34d7a9be15d790f3ab42de2a2cad617cabd048716b84f2a86ebda542b14e6d38735729a62b431eef4687b47291db1f1437400077deebc7a33acf01d614d46129b266c27e1d2a3532ee15e0d5fe739ebe0740a49937c5f0973029d852c05b6b5c736125528942b110840b8961c81f5dc0b5fb4c04483c7a299415cd4a765ef34a052c9a5505e6a9d18d486dc502eb55f9014e56ad7b0f31b538442862ef60848ff5b61a3feb358d1de55a191c96c48ccd8677ee5f41") tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = fork() tkill(r6, 0x26) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9b, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x99, 0x0, 0x0, 0x0, 0x0) 01:59:32 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9c, 0x0, 0x0, 0x0, 0x0) 01:59:33 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x42, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:33 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9d, 0x0, 0x0, 0x0, 0x0) 01:59:33 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9a, 0x0, 0x0, 0x0, 0x0) 01:59:33 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x10}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x3, 0xc, 0x1, 0xe3ab, 0x81, 0x1, 0x0, 0x400, 0x5}, 0x0) 01:59:33 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xd04f00) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:33 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9b, 0x0, 0x0, 0x0, 0x0) [ 889.579454][ C0] sd 0:0:1:0: tag#672 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 889.589233][ C0] sd 0:0:1:0: tag#672 CDB: opcode=0xe5 (vendor) [ 889.595481][ C0] sd 0:0:1:0: tag#672 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 889.604442][ C0] sd 0:0:1:0: tag#672 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 889.613391][ C0] sd 0:0:1:0: tag#672 CDB[20]: ba 01:59:33 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9e, 0x0, 0x0, 0x0, 0x0) 01:59:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:33 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x81, 0x0, 0xd2, 0xd989, 0x3, 0x6, 0x0, 0x3e5, 0x40, 0x3e8, 0x3, 0x101, 0x38, 0x1, 0x2, 0x6, 0x9}, [{0x2, 0x20, 0x968, 0x9, 0x80000001, 0xab3, 0x4, 0x2}], "922dc875dccde5c6562e4f85c1cf6602df4867a7aeb6ed4c9bfd39c105a4c87514da2eaf775c38637fac2b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a3) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:33 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9f, 0x0, 0x0, 0x0, 0x0) 01:59:33 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9c, 0x0, 0x0, 0x0, 0x0) [ 889.866220][ C0] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 889.876006][ C0] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 889.882303][ C0] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 889.891253][ C0] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 889.900225][ C0] sd 0:0:1:0: tag#673 CDB[20]: ba 01:59:34 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x204, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:34 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa0, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9d, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xf04a00) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:34 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9e, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa1, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0x9f, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000003000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r7, 0xffffffffffffffff}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0xc0, &(0x7f0000000180)=0x5, 0x0, 0x4) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() tkill(r8, 0x34) prlimit64(r8, 0xe, &(0x7f0000000280)={0xc, 0x1fb}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x10000018, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r3, 0x9, 0x5, 0x5b, 0x7ff}) 01:59:34 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa2, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:34 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa0, 0x0, 0x0, 0x0, 0x0) [ 890.580233][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 890.580262][ C0] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 890.596651][ C0] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 890.602914][ C0] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 890.611874][ C0] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 890.620840][ C0] sd 0:0:1:0: tag#676 CDB[20]: ba 01:59:34 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x312, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:34 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa3, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa1, 0x0, 0x0, 0x0, 0x0) 01:59:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:35 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x1000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:35 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa4, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa2, 0x0, 0x0, 0x0, 0x0) [ 891.061639][ C0] sd 0:0:1:0: tag#700 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 891.072004][ C0] sd 0:0:1:0: tag#700 CDB: opcode=0xe5 (vendor) [ 891.078266][ C0] sd 0:0:1:0: tag#700 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 891.087202][ C0] sd 0:0:1:0: tag#700 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 891.096156][ C0] sd 0:0:1:0: tag#700 CDB[20]: ba 01:59:35 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa5, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa3, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:35 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x402, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa4, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa6, 0x0, 0x0, 0x0, 0x0) [ 891.262490][ C0] sd 0:0:1:0: tag#658 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 891.272259][ C0] sd 0:0:1:0: tag#658 CDB: opcode=0xe5 (vendor) [ 891.278539][ C0] sd 0:0:1:0: tag#658 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 891.287472][ C0] sd 0:0:1:0: tag#658 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 891.296431][ C0] sd 0:0:1:0: tag#658 CDB[20]: ba 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa5, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 891.410919][ C0] sd 0:0:1:0: tag#659 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 891.420708][ C0] sd 0:0:1:0: tag#659 CDB: opcode=0xe5 (vendor) [ 891.426944][ C0] sd 0:0:1:0: tag#659 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 891.435908][ C0] sd 0:0:1:0: tag#659 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 891.444863][ C0] sd 0:0:1:0: tag#659 CDB[20]: ba 01:59:35 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x14ac000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:35 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa7, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa6, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:35 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x406, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:35 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) gettid() 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa7, 0x0, 0x0, 0x0, 0x0) 01:59:35 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa8, 0x0, 0x0, 0x0, 0x0) [ 891.888365][ C1] sd 0:0:1:0: tag#660 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 891.898155][ C1] sd 0:0:1:0: tag#660 CDB: opcode=0xe5 (vendor) [ 891.904387][ C1] sd 0:0:1:0: tag#660 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 891.913364][ C1] sd 0:0:1:0: tag#660 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 891.922294][ C1] sd 0:0:1:0: tag#660 CDB[20]: ba 01:59:35 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa8, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:36 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa9, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xa9, 0x0, 0x0, 0x0, 0x0) [ 892.048865][ C0] sd 0:0:1:0: tag#661 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 892.058796][ C0] sd 0:0:1:0: tag#661 CDB: opcode=0xe5 (vendor) [ 892.065036][ C0] sd 0:0:1:0: tag#661 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 892.074000][ C0] sd 0:0:1:0: tag#661 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 892.082953][ C0] sd 0:0:1:0: tag#661 CDB[20]: ba 01:59:36 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x2000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:36 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xaa, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000440), &(0x7f00000001c0)='./file0\x00', 0x1, 0x100, 0x1}, 0x2) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) connect$unix(r3, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000740)=""/178, 0xb2}], 0x4, 0x3, 0x4) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:36 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xaa, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:36 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x604, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:36 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xab, 0x0, 0x0, 0x0, 0x0) [ 892.465197][ C1] sd 0:0:1:0: tag#662 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 892.474972][ C1] sd 0:0:1:0: tag#662 CDB: opcode=0xe5 (vendor) [ 892.481235][ C1] sd 0:0:1:0: tag#662 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 892.490200][ C1] sd 0:0:1:0: tag#662 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 892.499149][ C1] sd 0:0:1:0: tag#662 CDB[20]: ba 01:59:36 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xab, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:36 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xac, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xac, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0x0, 0x22) r4 = gettid() tkill(r4, 0x34) ptrace$cont(0x20, r4, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000017c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001780)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x21, 0x0, "98c314aa0278198a66057a9c9e042e08423179ee8ffc9416a295bb4d312ca47b479032c4cfdd9b876cba24d451f11bbdd5ad82ae20cedd8b75bcbf51d8efaa", 0x36}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="0740f3ea10", 0x5}, {&(0x7f0000000340)="39ed42d48da9f8766522867cd5b250fe57717613aa5bdb1a7e2c28d64de4ee7f2369dd4e2991ba19b523a63de5551ee7fbad1f2c2e36d69f9bb40739c3f0789b313055a56da4f7b47bdfdf120736f372ebc3b12cc4005d75d51a7dce347aa6722784b07428269df130d58e0d50d19b1c63ba35bad549a4cc562a68fa69e3e3133f60548ad839a941657997b3388def6b6bdf944db1c7b3fec50b5b49b60d75a199b645296653600ee51ab56160924ad91f51d0ca7156d68cae6147d0545c75f46f059c2a7c15b74c42cf8f986875633f45dff3116b34937700a23de29e", 0xdd}, {&(0x7f0000000440)="a73cfe3dd70c9b4c49b1b295e3235770f505e8ac83ff630f8665bea27e1b95323fda60cb331155f74d490f857d719d9a1330bee5a8c21597fce52cd3060e3d04374b5bb518d5cee3969dfb6110f7071fbe0ebd7178dec657f7d48c69c5ad9ad678f70a423426075ef3e8cf6b083723d3f61a155c8120086ca0e35e507325d95cf92f0dc68be3e0916de727bd9e2b89a1212580c90347c2ae", 0x98}], 0x3, &(0x7f0000000540)=[{0x78, 0x116, 0x3, "7b5d7cc047448bb89e3fd18f7b5bcd9bb7e16a76f729d1d945157232461c481f332f79042ecee782674d71755d81d577189fce1b219639e9b92627552343cabd004d4a6a33180486acbfc1a09db10d755cd02ad1ee64f79a3cf4cfff3fd6af0e111a0f4b61"}, {0xe8, 0x30b, 0x9, "9b5a7aadb05cbe76ab56d9594b8efdfe44b016dfaadd41527a559916cf94eb4d3e8ec0a31689a22d53fb4b57d1e42d12d04e4d9f70c90628f63d848ff3b7e88f161fe5a589cddedd9afced9b85a9cfc337982aadae007deb9e1ae02c0e9ee7d3e0b881145dc039efa20579976d8f275f3303c42430ce7043b72166fe5fbe95be74a28caaad0bff74aa5abd6077d206163488fccf24497044df793c1bf930c781087c31397001e421c971936c5c4956093107cdb80136e372e1497da9049382fd026228da75f526d2a9fc140ad0a3a92ee70a84"}, {0xb8, 0x113, 0x5, "74d22e82e86abfff22f5288a461e9e35a369a29c8489a75fae938d8776c210df1ba7aa738fa1b6dc725f6e7a226f30f0157ca3332ea554cd022d88e7012c6508add6cd53a0260b4faf796bce8f0de6599f2384b6b3f1ffe9f67cb499888fc357732110b03c4de646acc843ff03d8d1d8a5697d733976569a8fb68a60995ffc22eb687141532e5ded8860481eaf70d87a58ad6c5051561c278e7f1e97641b109353bbfb66"}, {0x1010, 0x3a, 0x0, "4994fcb9f7ce6ca9ac68bcc870ec892115584c5f70dbe223d3471c54b37906809a0ee100328a3fa005308b1741a2ea7a000d40a8a77c57e02ab23143aafec4290f16ecbb3f9b2debcafb9b75f0d5f0bec36aa8f2dc0bcf332027a292cd439471de8cebb95ee620273b4e7a7dc2c4412888152dcd3b7ce29afcd9a5cadcadbba53b140de98e2cdadc122c3af335e592c23d4b11acb58cec54cca9f146f846e74f76cf3cc6da54ff5fe7aced6187e02b6037b847031a1ff2a8c0ff28cc2cc2aaa29f0eb930a33dc67f09008bc09752220ed4981b7805d8ede726b3590562e03af3ab8b1feaac225833d83b2edbda9eb8c63f6c66a6ecfa10f56da5cabbd21ae2bcedf5c1658b49b4e1b09261a51f63e01ce3007c8ccf16b411327a4799626dda24a6be280f97080690d1d3c507f2ce5a338f38f5b5e0eb0b53fdc56a7ab9471c81e88f34a0dcaa417b11f82374fbcb64c288cdacab2fe128d898d5fb10204b9351369671bf2764089f576997e772467faf6b0f536dc2da185a983d339c473457ad84d26b36fe42499a9c32bd18ab252a64aacf970aecf155b45208530d9c32fa9d92e1f54094bf11c3dfae33cf5e0ca8b3f3eba26a48c3bebe5e09a116ebcdffca96db21ea9f9fa89a076e92b654a284ba81bab663a332df7c5c7c5ff93abac252ffea14beab337d42b528e1e1ec630d9ffc5961ed3d4c48648388b59aaa69ac9e1fde8fea5ca0ec10de63227e555aa9a5146017d216c8979a285d5aa5a5223cb1f5886af9ff088c0bacc130d2fafcccd64792269a51ea37647d5a330e25a23e32ade7e662053242287b8b4589121e632d143b4a2f061eea0ad68e2149cf87bcad568586a3799c8ad540549e6bfda96ca8a982f5e29a0a88dbe673bd4b6078c71abe4d1086f7017a1d8a2454743e31ae58bac57a12b35523734dcd7667166f4f3a7b978ad6a61adc20b0ee7e43e28df1bd073bd4d14c63f231ea82400012f37e8740dfa5005168eaf90dd98763da2df587dfc3a85d668139a573ad396f630f48c0cf8ea445907d0ff2a9976f95decd7c009e1096c94b988849eba66ed927d3b3846e381f3c413cab301070e93c7bd6cae35667e2a9094f48ad1007304e41fffc49b4cd91ba0fdc48a19ab31df2f8c731114910016fd1edefb2bf05c792b334f07862677cd2bca91e10a0ac360eacde687d9e138ed35d1628afcd454717a3f4da5022d6a0d679ba009b9c383341adb0a4a0aed31155b92eadbd4f88ee00d8d7ce1266d2928deba19a59afac7ab019bbab5653b402f072035578e3f49f0ebb5bb297e7ef6556bcf4d0356c714171337b32d7072742bab7cef275f6abfe9e8e76de275379fafb3654024a9a8169b24792a3e997944c67db69c283374075ce9832da7a594afaa69faf1cd6d831c5e4958e74f29066999136e63162fafca40cc7d96a0fe194512a895c5b67f71f75cde6d087a76f11a267fffffb093ab186d40a7aa060be78518148b2e9501ca2be85f0c6ba7d036a3034edef59a41dfaad58acbb1a30fb5ecfada24e2fa5dba0e7b3f6c0d3edd2c354b91f050da1985546e078587c885c2dfdea7349270713efc49c714d99efb139a8b79e105529f8f7ded864ea61992918cc115e4639597f7f5ae8fda5ae15a58d6ce378220618b3e3baa05357ed583e39160823b42bd003287eb12d1f88c7d2321f6c75a7ffa7c38dbb11f9ef29885d8ecabb5742a333ca9417fb47fa1e88aa495c9506be30e9bd58ccca2b0eac6236a71a446856864da78cb5b4ff478a9540d35daefcc3236aa34f99dc54e4c9ef8a1b3d3fac1206e1507840879ab896724bb6659d8e7c8d46e9382087c16458c7861511f4d0eaf908e3c11561020001802367d5b70382585dfd551222943986890ca8afc1b1fce2023c8d908b2528bbb94192271b452b981b4b4a7a0e87aa444226f1ff95f5ca351e118291c2b7423cd3ef3ed70739bbf7370f443d059b6e964ebc42f4b893e6b2f0dc16e9d6a095fbabaa2a879eff4ef9f85f46120d1cee1e107c2160288c9632a6c4eaf1667ebbd58b6bcc0c741f4c64f8164a4021a5086fab9d7308982776429bdff7cf68c19d90d75b6fe484ea04fff3bbb895f0d2150d855a3cd64737a018df953708e685d665ff1639988d47bece6a42479b700fb2de7285a62a19a3ccf88fdbe5c0cc5787bbd017ccd6f40e9e88fc8d4e17cefd78e0eaec45b29cf190c628c853eb671a654eef5bd37cec5d936d30485890ae93dc7b5bca1e0e75671f59308ec33aa7b0092c17f0a53ae5a7e35edcffe19a576590389d4d92bcb078a193903ac11760df0e51b453c859ff95f0d46fcf98579c3c57a2fb4b40bf20ba230c13dacdc92ecb55ec9ab8ed76e1a7ec8bcfeb896e9591bac6f6097ad72aec2ff3d49946f909cdf0dbf0d4d1da7f2d9a38cbfb0aca69bffb4431b969b780bd475378e8dae7b26f3ff720e4462aa6a97c9f3b92bdd033522337b9f0288042ca235e7e7315a09295802bb212c7204e693db9ccc34fd85b3d732fa3392d41bc42728ed292c0f8c88f9879b0a4a412a0c0a274bc1d96f6b9bc800f185fe2882d37b2d25291a4495ec91c018b3348dbb85a22798380951d1676c6c785967617e543e4e015bdfe0c90f51e72bb2f27cc0a388b8afc7f27a08f8b79f9b6332de5e6f8aec5af553f683410fb038353b22f4b2c06e77dc85a48d8c437d5d7c965bc29e98ef9b730e5f9599c3ed7c66221f8c2a312800969edef5e6752dff84368ae28de89eec75d7b1594be4d73078831951d56854a3e1e135581b3113201e2d466d04963b84a4d8dcd81acfcce336f9171f13cb57e62bc26df8220058eb463d9febd8d5b6d7c527b9470c94ecfe2e378c68090c31cbec58523bc80b491a8d373f0ade59ce37db6b4b6561712fe9b7046a16008a76ba51dd2e29ed1ff431724ad3d3a16033e53b3ecffb8574c586b874366723237a58e0a26941c74d6a15cc80a8f125973020fbb897ba3ecdbc5debe2e035fa3114e235d586e1c42d391f76259416fd7301b65e140f4f716474a10820922f48580ab52fd6c0d66adf1e5efc8054f21dbf32eafd0b4c2623d122631ab46521abd57bf4210c1938d36189aa2e4709660e2fc430fcda394a0679469d09e7d4e560c3d66eda8f7d37a25f6ebc19945e10ebee91685ff3673348f04c686ca3bd3fcc11ed288e2a42a0ad94ef71a742fb12c1448c8592f8654abd80c9f46a1d9baa6aa182b5806c011262b8f44d85cbaa2b3af8498b504bf8ef0ac5ca56579aef21e471d67df88811e76525c44b80527c65fa75b1f537f048451dec81f285d4e54e6b7b63fd111832052db8e0548940886319690b619a3aab92a9da089b423e859f94f123fc55e93e5b9161c7fff0cffeb46d132e3e0e45521feb4bc84369c75fa02124bec38fcd8fab0782660aaf20b3759a757d23cf747cbd782ae7c1938a4beaa435576af44eeca38290597bda7c32c95fe9e6d7d401c5188aca8d4c9cab17bceec6cf8c2366d33201a604a9cfd84634704d1ecbc2d112be37628793e74c9900e14a666dedf480f386c65dc8feb8765bd8bbad6036edcfec748b1145a3b6df2553e945231471fe4bcfdb805e3af4f02992f99e088d31c55cf749e97cd09f2d8f839f9c2b7c959404202df5d8739e07e3c810067b56c5503cb72218fb4497619031426bddc795f87a5566c7c82015b0ce1422433914ca6f3e9a0aa71e9c05b8817f5b34e7b9ec66739df2e485d2714953e95338ff57a15e9fdcc15b7f045ad60f3ed3dd701b3c6f4f2fef7d3a8e3d9af1105509fa025fc9051fdd092e8ee587e69914de5dd638c6440ae240b4423c8b6171d46643139c092b714efe355ecab23d0a64cc1cbd5af39935c3da036220c2152ff07d2da032b6549676571cda61f78e8c7b024ea293a78d8d45c184244c3ea6c0143563793a2ab4c4a939688d63da122154afce6c4016a34dfe254f9cad1cdd45181a41fd5dbbf4c516788a360fea60fd696878980a6977ac55f603113eb0096e24f7ec2ed3c8ecf46c86527c20ddc3f5a53894a59965fdc196a3b03e3fba22d4bdd80ed62ce0b5fb1f6b31e5cbc01b6fa6e7c39525ecc1e79e583cda3630e379b8d68533a2db714958494c10b1a32dc5cfd121777998b3c5910cdbc180c0d084e0d9057053817d2bb1d1f30f737c066c74521b023454e6ce0031926f0748914fa476689871cb601e037d92e2c7dc106295c0bc3c41e79a8d393eeef55d7f1f5028a2da520f6aeed4fe0743cab1c0e339dec40cfb2fddcdd70c80f63d8dd791f409aec1b31f512fb87517550e6026d2ec278f39a255ddbd552e2513e4b02d2a0c083c83d03158a16dcb3ab1faa45a0ba414a44db8c08fcdaad9b048628c445abe0c253b49bac8a0da33e9dd4faa3fa153d482e5e0bfc74fb35235850ae27cb67fa3057f726585ea88e2ec47770d550e1c29e0ec70c478b0918b6d9626e5f553150dbf75056a72d40bd10b38dc07b5c47315e4431ad7b6fb9f4f30bcea18a56b3ddc4b27f6d7a64fd5de9c41733310f222f0ce909b78cde6e3e38a0218c0319038bfad66e56162fef1751ecda82798c7fc749c30450ef56963028940143c1bc573ab85286d8ae1c45be8a83339db6cadf32da8be16c15e8ace5228957165a2d14843c8c66cb434ed9ae02b0fdbc57460b6c267750a79535c01f929599189d198a7426aa2c5bb714efc435383de96ed279ec814e9dec3ca8e7547de9ce2bcb989fc214254806f252643f1e68aba6a0ad0d5b04ac7cef13845f69bb80e297e510fc59937fc100b749bf8fcbab2e8d5049e0b2f7161bf9908c3d8be2278f483eaaa26366bde4a3cc94dc70a05a3a60146e2cc8d76477f7ed22f29f1d41c679c1123e97af21326e3c4bb682591bcedc7ecab107660e0c16cc577d6898eca713d55f5affaff94cd8c2ec8f65f256fdde8eba1371083428cc2335a8d49b1f8f3e90b1270c309cfd320704ec1ac5eaa01b759e18544cd0c91f63ea75558c479b3fabbf19ecc232911a83e7a4ca0453808fd6c1f559a5edafac1ab02fdcc829a172466b4152d2afff6c5e9715f7f9c1c216daa443e780ea6f4ad460e883b2258e15db63d4031a276f949b29f8c7c8ba95eb3aff358b02e3d845e2cfc22c4e8141881fc0eda74820de71010e0cb0df0c67e50414d2744c2ea51edc8c9ba2e009f63060f009637a34193084a769f13702d2d5e9f9ececa8414aec9fa64177752682fea6bf4fee1b8bff2382fbc5313df13c6a73d64f87c50e2c2fe33780d9daaac9f6a7e6c4e15e5e35647474e5ac2c0f5d7d63b721f80e77069363cb04463f54c45c33bf0bee68588bd0fa64f3b88828df0b9ad8e28651624a78a2c1f8df26938c2a72297cdd06cc3d438361475e1aa37acd4ecdee25d5cce91df8f226dc6a26e084a9d94df02f1444c6db09c780c8a2ab1bfec5338a15d700eec2f4c73d8cfb0484d231defc3906c21d67191e7207e6c244dfba96af8ffc93847d470e1b5120d0f0194e83721869af1b94bb7ec5dc4c3e99cf2b2d131f98c773a6c12e9e46782404ff8f89f91e78895d33cb50d1da1df36502d9dd8bb2182155d96bfbe6db062d9d6d89bb0011f0483c3f03e65fe020cd23acb31a549b987a13a8e16580b22089217a6f2fe307860fe378a3c64c8408371a408798bbf87a58c6f0b100c8d3bc589c28051a88b6f21ad228403ca5a079b5d8cb5f88e253e05078f2ec0410fa4ea2a01ed96f92a784d086c4584351faf56f0af42330e3ec13e20a9a01cae04bc1b6"}], 0x1228}, 0x0, 0x20004981, 0x1, {0x0, r6}}, 0x3) [ 892.685569][ C0] sd 0:0:1:0: tag#663 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 892.695333][ C0] sd 0:0:1:0: tag#663 CDB: opcode=0xe5 (vendor) [ 892.701605][ C0] sd 0:0:1:0: tag#663 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 892.710587][ C0] sd 0:0:1:0: tag#663 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 892.719544][ C0] sd 0:0:1:0: tag#663 CDB[20]: ba 01:59:36 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x2040000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:36 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xad, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xad, 0x0, 0x0, 0x0, 0x0) 01:59:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xae, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x700, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 892.988875][ C1] sd 0:0:1:0: tag#664 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 892.998643][ C1] sd 0:0:1:0: tag#664 CDB: opcode=0xe5 (vendor) [ 893.004904][ C1] sd 0:0:1:0: tag#664 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 893.013843][ C1] sd 0:0:1:0: tag#664 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 893.022795][ C1] sd 0:0:1:0: tag#664 CDB[20]: ba 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xae, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xaf, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xaf, 0x0, 0x0, 0x0, 0x0) [ 893.115853][ C0] sd 0:0:1:0: tag#665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 893.125623][ C0] sd 0:0:1:0: tag#665 CDB: opcode=0xe5 (vendor) [ 893.131900][ C0] sd 0:0:1:0: tag#665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 893.140847][ C0] sd 0:0:1:0: tag#665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 893.149905][ C0] sd 0:0:1:0: tag#665 CDB[20]: ba 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb0, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x34) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x20000000000000, &(0x7f0000000180)) ptrace$cont(0x9, r5, 0x0, 0x0) wait4(r5, &(0x7f00000001c0), 0x40000006, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:37 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x6040000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb1, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb0, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:37 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb1, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb3, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb3, 0x0, 0x0, 0x0, 0x0) 01:59:37 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r4, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x2531, &(0x7f0000000180)={0x0, 0xe305, 0x2, 0x3, 0x13f, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000340)=0x0) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd_index=0x3, 0x0, 0x200, 0x1e3, 0x6, 0x0, {0x0, r9}}, 0x1) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = gettid() tkill(r10, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r11 = getpid() sched_setattr(r11, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x7000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:38 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1203, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() gettid() tkill(r4, 0x34) prlimit64(r4, 0x9, &(0x7f0000000280)={0xc, 0x1000000000001ff}, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000580)=""/185, 0xb9}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/80, 0x50}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000001840)=""/15, 0xf}], 0x9, 0x81, 0x80000001) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7000002, 0x12, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xfffffffb, 0x2, &(0x7f0000000180)="6e1e76d2a846fc156647cfcf86a65a03fb47a29c249b9f0e10b844d467ee7ed113b533c001ee092362cbddfd654af9be9672809a4b4655b5fb57c37dfae059e433b53911e4d70302d8fc168187a178e66024758f7562935067ecbd5b35e15193b62dfe768130ac0e1ba14b1fa8644f26240470194711b8cb3c7ea92a13f67bb365699838503ede0a912122d7157005dbb0c8246d", 0x3ca5, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb5, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb5, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb6, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb6, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb7, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb7, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) r6 = getpgrp(r4) tkill(r6, 0x5) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb8, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2b57, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb9, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb8, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xba, 0x0, 0x0, 0x0, 0x0) 01:59:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:38 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xb9, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xba, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbb, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbb, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x40000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:39 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="3e521f753a604f095e951284dc74b46421afe3434f1b759a37bbc0f3f9b4fddd1b32f328b925d20544adc4b2a6ebefa61e2794cd2a3e6717600410dcc8d8abc1b9186798281ddc09730dd6a4d6d1d3a6e748cbd564ba177ca631d84262e1", 0x5e}, {&(0x7f0000000340)="edca5341b590c292ab4108694ef0d55300a65f0708abc5b773c45af9e6e439b16f66ef880c02529578599e1e32bfb92fa1779d72e870afa496f775b538f85e2456314a9f92fc6700a3cdd0a7ededc94bc552bb6f52bbdafcea4c570b1d212f9828ea958313f00a9613c76b847f937d66b092f1e92b4f9b990780e8635c0da30bf1ee3a4901244633f437277259feefa31ddd2dbbeb3bedc34e6f76f11dbed5d789602a2a81176c51cd9e52f788010d1f3f4029999c2c2c06c4e00c4273e735fe6df638f84a723917329b1ad72d6936efff0a", 0xd2}], 0x2, 0xa) sched_setattr(r6, &(0x7f0000000240)={0x38, 0x6, 0x10000044, 0x0, 0xe53, 0xfffffffffffffffd, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:39 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:39 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbc, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbc, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:39 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbd, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbd, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbe, 0x0, 0x0, 0x0, 0x0) 01:59:39 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbe, 0x0, 0x0, 0x0, 0x0) [ 895.613041][ C1] scsi_io_completion_action: 7 callbacks suppressed [ 895.613068][ C1] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 895.629427][ C1] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 895.635672][ C1] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 895.644625][ C1] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 895.653579][ C1] sd 0:0:1:0: tag#673 CDB[20]: ba 01:59:39 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) lstat(&(0x7f0000010d80)='./file0\x00', &(0x7f0000010dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011f00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="36a4b687faae78dfea5baf2cc9b2a82f3935996dca78ed42d99b52b0e7a236ed83581f692e2549b0ea7b2279e49dd1181195371064e0cfcf3da3b6ea5a0c7bfd8d0b3513c0dcdf2e4ed4a79d722dd10c3a9bdcec5f127ab65d1348b5b2a994a95ef3f83f464ae3207f0e61d398614d6a4c7b2e832a660846283d850fba938849d4bbbece84a09ee8ac1af8bc955d3b501411872442653b7f1e97ce17dfe7c34911b13c079b0f", 0xa6}, {&(0x7f0000000340)="f9481a27319a2d14ddfc74a1c177e0e78c4f31ef514d50b57707fa88e075076954", 0x21}, {&(0x7f0000000380)="3b576a5f56d8ff9ce3e5522da8321108eab86ae053c0b8c2d86a83dc24425b181b63c362947fc9e0f4c0a4e3258d9134083e0596329d26adec70a82e8c24ef1bee320c011d8dad479a1ffebcdc98576496e9e4f26e8e78fbaeffa76bf606bebe3713131c4c78986fe7002da38f717d1a399a295e9c954b4e729cad66bd4a50c915fe95f867c42b02", 0x88}, {&(0x7f0000000440)="7bf2a491bd9237f79d305c92d09606f903f21dc9bb88d75f111333d2ecef2b512997398ca1ccd979eb", 0x29}, {&(0x7f0000000480)="466d23ac396be240dbb9c7cbf28543cada3317e36cf010b7b6123bd0b9ce071b57774e7107630f0c1566549d2263c3a90e3823610f1693c65c203c5e80fa2c92fc58fe70326f6aa46ff73ff72b0d36ccb2c67917cd960210f9141e4f7373caa962f32a775cf7baf2c9c72f00c7cbeb372c485aa09fd7ffaa107844574c79b5aeb4e3e437b03371f6948cda9f55cfa70ef494da56d00e885f042075405f227175960514a5fc400bb29bcd77a97e7fccbba49da8f8a9482f75c02de6f66c74bcfb0f3cafd23d8345960cea1de02a56a20dd2f5cf57131026c3e740bb353aaeefbeda7ac3e4842a1e6d4465c1712c369d260bbed9e09456a3056b", 0xf9}, {&(0x7f0000000580)="b8317d62f735a015cc4c101d2972e4ea0e22f01bda153d6150ef563d4d57b654d6289904a7b96266b7148d82e4871f766b95ba662ed22dab844f18c1b5a910b2901aa20af4f159a26f71ea2b27a98a88d9af7e57f8049f26adb7", 0x5a}, {&(0x7f0000000600)="f84014b3e9dcbb6c51af2532c553986e35653261fb980d0e9e72490e2a0e9ad98d1140b103d3874747987c9ae8f127dcaaa6583449ee56", 0x37}, {&(0x7f0000000640)="ccc300646048e2dd8f165dca2fee699c44aad3dd119b5c8ad59638210d587c57424e2e51139d533758fc3f378f930f21841ceca4489124f1498bec3d9cf0d0e093f8ca15799f4bf0b413c87d50fa439efee3370041b2194cbc53c85c3759f97880c11d8182042e4ab4dfbbae98d40a6544d79b15623c7f0492a730c9ec49f86343a53ec92b57c49b4387a46e3f8d76c3a41e9b401f524cecafbb9a549be8a0e2de585ca64b151c7fbda6c7288afd34cb319ea219d34a8c0922c6c4ed8efa1f438339a8fd", 0xc4}], 0x8, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x150, 0x8000}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000b80)="447e0bfe5ebad71b0d89", 0xa}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="87288d725abbf701b8121a30aab12e626d51a6445d62796755016965c040c3d418b950aeb54900d58879e346691f8a8ed2d6f6c2e66c734313a60caf28628a9b02c79bfeb82865933aff22fd9d51e107ec2ca3822ec08608d715e48ee0711965495b8dcd", 0x64}, {&(0x7f0000002c40)="bce4d14dd09fe6b40694bc46c45e3a1161fc01e89e3bab161f6a6895101154c431020380ea0ffa960622ce782bd53c2c7e2db6bd8e277960b4c9c24da54498d738256eb601359d95424feb4e5ce4428e366d44ac1384c8662f057b6eeae743240baceb1901174c7807407d3c86b6667b43ae79e489f909217a0994d8a80a34efe1e9689e", 0x84}, {&(0x7f0000002d00)="486233760c1a1fea393d16111d0c6caffc63bf4816b1b55956f87d4f9d1e32d3b3a292074eb7ac3c45b8fa37c27dd330", 0x30}, {&(0x7f0000002d40)="108ca8dc5faa2697ee0d66a77749453a6fdf798aed2710204427092fc5695994d546d0f01abcb2b72bfa782ec9a0dfd5f3f2e36b687ee825f019668c153efadbe710a0981dcfe0c524fb9b4ebfeb7cef0429ae9c17f041d0f664e4123d5aeb19130fe994dd6c9c9e40d1fb44c8bcd0b10911e3354876d21384260473771bebc8832b4cb2c60f28bd0fb7537af941fc8d83db0c8d1d63b4f3bdd3f11b70b9bbf75419e12b505741aa81", 0xa9}, {&(0x7f0000002e00)="23c36ec925c1419389051721bf4d5237f98a04dc8edc3897078f2544b880cc35bcdb37444a300a252ddb8272008921f7891ef3db51e05828fe5a078ad461b7902139cd52e3292888e28b6b3f97a73e31a231a226ebb6b99b", 0x58}], 0x8, &(0x7f0000003100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70, 0x24000040}}, {{&(0x7f0000003180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003200)}, {&(0x7f0000003240)="9ac2823bea9fc20ccbddadf7ab48bdd9b44b95d61ac756a61e904608c72f98bc518bf9b931910ccc839c26876ab19b7521220d83afe891b8b7123208719e8ff14d09e6da00aa0a48619fe8ab36d95950cc416cf0dacea807cef5ea0a2ab1e4fa36e8c50dd75e4011ebecb922b141f2dc81e0084f98f7beee63bb0c5fbfde0af4039d6dfe5bdc961bff2a3893b2b11b84c212091cac48aecfb546c3118ff145c8a0bc64be8564b85f68a1f927383acd6abeff0355bb4a718c1a4511dcac42c728a281ff95bcc48e441964", 0xca}], 0x2, &(0x7f0000009780)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x70, 0x1}}, {{&(0x7f0000009800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b80)=[{&(0x7f0000009880)="850036450ab065cf4264062e33d2a81a7e940115ec213e7928543b73c994c5729af8403b3288656d4c3c097ed798ca285c9c522f31877de0d858a4ad178a8e68ffcda0c2de5acdb25fbda19a68729f4cc2c505701c0da1b17531e92c0c13be9ef52e80ce41b088a9c303800f03114c96d060afef7df023c3c7bef72afd8fc4e384d83a7a27aba5f84c49c014aebfdd49aab8e1f7f8861029810571a2e0ddf1fcc89d080e814add017e0f20bc03fda60cab1dba663cca234c5d68f2527995cb4768b787e25893ad8b4983b301062449c64219441312ac0eba", 0xd8}, {&(0x7f0000009980)="05617877c7008612bc476f8a5d725eda685f38c3baaab4062333c97fac891b7f4261a3f818973f1c3975a9a1c5bb96ff48d911fc49a46499849e877c095218aa31007776a8c1ad77c279a3e66d5564974e473541b956ab6e48299b128e38d77b326c76611fbe24efcf7b3d2e3db4371a152539963d566a95a3f10db35c6cae6b4599f3a8bd2b02ed05334b4460b981dd7fc8b0e14756257ba054cdf909ba1624a34e4188b028b5cee3a44f098ddb089ea2d2e1c975aaa4156139ed4f6534ffed6f296b6e8c4e0f983e468391b35c5b71f2edb37a9a3c1e224f53ea2d", 0xdc}, {&(0x7f0000009a80)="7da2f504d94158a6860c6ddde10cd87f47bb0f385fe98539b87c2776d1c6779800a7b74eb3588b88f58dd7b255f656556927cd3a86117e1bd66e8e19bb7e93e5c16ab95d3da9a0dfd725a69a7d1a34d83786be9b780dd8b91a197d3e27e1ffee0fc0cabde43c0e5b29f1bb0119e1007de55fb15e1bd523baefba6da70dc6deadc826ef93f4f2737b10d17eccba0a8531ca339fcdb5483a95e31cfb0b51719b87e3261d4a111b3d8cafa05357ddf6c172dc9f17420d26522c18d92772c46cb5f5f4a6148d227b3f9660ae29ba3a4546c394fb3c1869e44d7ae4006a2130e1e680b6b52c", 0xe3}], 0x3, &(0x7f000000f6c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}], 0xf8, 0x4}}, {{&(0x7f000000f7c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000010cc0)=[{&(0x7f000000f840)="4b670be781532139273730e2f835de201c9fd6434cbbe6a84b9ec790fda22ca686bf38eaa8ea41a479a629ad2152d253b0af4b2d383e05c094447d21b6c44f65ee21599ce9223bd83b28505d10b316ba3ecfe0d5", 0x54}, {&(0x7f000000f8c0)="63941d14834809ef810dacbffeee1cd14b26824ba447a9e5ea4173a7948452ec4e7826bab91d3e3e1dbcd8f662172b3955835b3b4fe559f4af840ba43f8966a5a35be6436526909a7cf1954736fd6de07036b3aa80066994a0e63d1d32e6824e488e142124991d69f1edd61d14d407d96e9052af5ce1db43edc982ed692a93fd", 0x80}, {&(0x7f000000f940)="046efc866a75c85d32c708dad343e9189ec04557be1900f6a8262eb0ec699f4fd55eb339fb4da0f32c6a6c3c239dd46798e49c3adedbb57e3ea155bbfa6d4c47bff063ad413dcda0554382e1e7c13128c4c70e678f7bfc4e06399217269fc5b08eed90b811a42c62464d467b8e47a818b2cfe119cc3bb0e673886de311e4234134ded57f2f5ff6ccd08967e7ba6662fcf62277505b550f0b9aabacb971f8637aad30687b9b07b646dc48461d35e8c6522e356b7a6cf72b697a456b48b8be1a88c5aaad3d1d06c5ced01939f8a7cd931fc7c772141108101700aad8ad63212bc33c90826843b139", 0xe7}, {&(0x7f000000fa40)="771d30b36b982b6534f4b82709969cb93b989cb9abc70434178be66653890f6098371053d39e19fc2f81e05896a9d07d9f8b6264664f89e00774bfb48b7be9362e9bb5a4cdebbeb6ac9ef2bbe5cd47c87360d1ae265b13f0ae36d3541fd5af2204b1a7bf6439a292ba4beac2bc01da13571be9d129bcd2fd77ef955129214dbbc2ac2f0a5de76a7ed73f188a5ae4f4da7167ae288d2ae6caf1416e17a3bbcdf5db8e1d391b54242d13b39f4cfecc101d444d900605298df3c4a3f7e11548f54395ed5eea9f8d28ce823bcf4cb7027314864bdeca2c4473e4fabae05b1885066468a621f4e76ae5", 0xe7}, {&(0x7f000000fb40)="f85bd6a5a37632b95b3ceaa7a310d162961fb4cf15efc6a9f88aa37768843967538425e18a4839636ba8d9255249a473117400fff8b4e574ed1f14e717ea8e0b3b6a71f8c998c73edb6b3916033f8dcafdd1eedee0cdeb80fb981810cf8f4a9b15a5f1a9aecfb87de444b8ee1057d41590e09103e11ccf4ccf6201d6b7f5ccf1249dd60d3edab50234fea768a79e1824c1b320efc9e3ed2a5fd3eac87c185435099648d2487c6baf16ce5a32461db8d28cb87e874f611695058390260f8305cf1d2396e1", 0xc4}, {&(0x7f000000fc40)="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", 0x1000}, {&(0x7f0000010c40)="60db4ee0feb98d56da126875e41597c02cc2467d3389d9ef4ff498adf3ba933acebd23b389cf904be4b2eac3e1f2ad9f4765dad5a83685363062c14278cf7a43547984dc9744bbbdfcf1cf29addfb8aa4cc79e7d81aa13209bf8fdfc49853e2093d204fea3629a08634c1fab251f2260452ae3204e514be3f4ffdea8cc675337", 0x80}], 0x7, &(0x7f0000010e40)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee01}}}], 0x40, 0x8000}}, {{0x0, 0x0, &(0x7f0000011ec0)=[{&(0x7f0000010e80)="c2ee68aa9c5262bdbbb39d269a18", 0xe}, {&(0x7f0000010ec0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x44800}}], 0x6, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x42000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbf, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xbf, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:40 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4200, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd, 0xffffffffffffffff}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x351402, 0x80, 0x10}, 0x18) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r4, r5, r6, r3, r7], 0x5}, 0x2) r8 = gettid() tkill(r8, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc0, 0x0, 0x0, 0x0, 0x0) [ 896.202879][ C0] sd 0:0:1:0: tag#674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 896.212878][ C0] sd 0:0:1:0: tag#674 CDB: opcode=0xe5 (vendor) [ 896.219151][ C0] sd 0:0:1:0: tag#674 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 896.228111][ C0] sd 0:0:1:0: tag#674 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 896.237038][ C0] sd 0:0:1:0: tag#674 CDB[20]: ba 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc0, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc1, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc1, 0x0, 0x0, 0x0, 0x0) [ 896.400273][ C1] sd 0:0:1:0: tag#675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 896.410035][ C1] sd 0:0:1:0: tag#675 CDB: opcode=0xe5 (vendor) [ 896.416292][ C1] sd 0:0:1:0: tag#675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 896.425257][ C1] sd 0:0:1:0: tag#675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 896.434238][ C1] sd 0:0:1:0: tag#675 CDB[20]: ba 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc2, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x47020000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc2, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc3, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc3, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x572b, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:40 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc4, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc4, 0x0, 0x0, 0x0, 0x0) 01:59:40 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setattr(r6, &(0x7f00000001c0)={0x38, 0x3, 0x55, 0x5, 0x1ff, 0xe1, 0x142, 0x9, 0x6, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) 01:59:41 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc5, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc5, 0x0, 0x0, 0x0, 0x0) [ 896.995872][ C0] sd 0:0:1:0: tag#676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 897.005647][ C0] sd 0:0:1:0: tag#676 CDB: opcode=0xe5 (vendor) [ 897.011930][ C0] sd 0:0:1:0: tag#676 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 897.021000][ C0] sd 0:0:1:0: tag#676 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 897.030052][ C0] sd 0:0:1:0: tag#676 CDB[20]: ba 01:59:41 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20800000, &(0x7f0000000340)="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", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001340)="bdb9841eee2f49534cf616cbff7feddae0b6c0679bb8d0c0a0665e820d28d16c616f4686373e07824676d899285bcc4b87c03b2643671f32d27c23600ac1397d46c93dff698e63a53f952a89fd489ba43cc983e6ed8260b09a5ace2d3564427658ba8ca13ef01b57582422c57c9cbc87b990e916c9012b5a8aac37845cf272c21eab99807a9ec91b5c840a9d96ef0e7c1a5be4a1e28bedfd08051dbe4ddaa4e3a2660a7694f134142b25ef169efd0a7263c230aa77b5a580346893bdbf0e025c4f97ea3def85f0ef") r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd, 0xffffffffffffffff}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2, 0xfe6cc6a7264bdcf0, r0, 0x10000000) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r7, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd=r7, 0x7ff, &(0x7f0000001440)="ec3776e20d54dc74c9a048b32e00b5d1632d9cb1bf9c68a3a47f1f776cd0a3b148fbb3d2b03bb1ce8941d51189859fa5ed4efaa463621f532d11066a000345fa27bc2952dc780d44eaadace24c9b33a40f57d5a2656f16f51bf58682a7aa5d2024275e613fba73fc97d01e4d504bdff03380c535ee5256f5e6073398724beeb79bfd3c96193ef28db27302c4ca138f7f6a48af475d38f12362886df578caed7e454309c4791aecb3d381f1c702f92db9d571ff4d60b0e530b485e0d8bc62328f2d15ba2d731312e8321c15bff137f78760473123442178adbaf2efddd3e6b69486ac", 0xe2, 0x18}, 0xff) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:41 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x572b0000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:41 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc6, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc6, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:41 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x60ff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:41 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc7, 0x0, 0x0, 0x0, 0x0) [ 897.599310][ C0] sd 0:0:1:0: tag#677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 897.609086][ C0] sd 0:0:1:0: tag#677 CDB: opcode=0xe5 (vendor) [ 897.615332][ C0] sd 0:0:1:0: tag#677 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 897.624294][ C0] sd 0:0:1:0: tag#677 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 897.633240][ C0] sd 0:0:1:0: tag#677 CDB[20]: ba 01:59:41 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xff600000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:41 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc7, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc8, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:41 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc8, 0x0, 0x0, 0x0, 0x0) 01:59:41 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) syz_io_uring_setup(0x6e16, &(0x7f00000001c0)={0x0, 0xc4a1, 0x16, 0x1, 0x335, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r3, r2, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x1, 0x1}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x40000000, &(0x7f0000000340)) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:41 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x9700, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 897.853801][ C1] sd 0:0:1:0: tag#678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 897.863848][ C1] sd 0:0:1:0: tag#678 CDB: opcode=0xe5 (vendor) [ 897.870100][ C1] sd 0:0:1:0: tag#678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 897.879066][ C1] sd 0:0:1:0: tag#678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 897.888021][ C1] sd 0:0:1:0: tag#678 CDB[20]: ba 01:59:41 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc9, 0x0, 0x0, 0x0, 0x0) [ 897.981411][T17401] ================================================================== [ 897.989514][T17401] BUG: KCSAN: data-race in compact_zone / compact_zone [ 897.996399][T17401] [ 897.998728][T17401] write to 0xffff88823fffad90 of 8 bytes by task 17400 on cpu 1: [ 898.006425][T17401] compact_zone+0x1449/0x1ce0 [ 898.011090][T17401] try_to_compact_pages+0x317/0x840 [ 898.016272][T17401] __alloc_pages_direct_compact+0x61/0x330 [ 898.022068][T17401] __alloc_pages_slowpath+0x2aa/0xbf0 [ 898.027429][T17401] __alloc_pages+0x25b/0x320 [ 898.032001][T17401] alloc_pages+0x382/0x3d0 [ 898.036413][T17401] __get_free_pages+0x8/0x30 [ 898.041002][T17401] io_uring_create+0x944/0x1980 [ 898.045850][T17401] __x64_sys_io_uring_setup+0xf3/0x130 [ 898.051301][T17401] do_syscall_64+0x44/0xa0 [ 898.055706][T17401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 898.061676][T17401] [ 898.063985][T17401] read to 0xffff88823fffad90 of 8 bytes by task 17401 on cpu 0: [ 898.071600][T17401] compact_zone+0x1425/0x1ce0 [ 898.076266][T17401] try_to_compact_pages+0x317/0x840 [ 898.081453][T17401] __alloc_pages_direct_compact+0x61/0x330 [ 898.087245][T17401] __alloc_pages_slowpath+0x5e4/0xbf0 [ 898.092604][T17401] __alloc_pages+0x25b/0x320 [ 898.097177][T17401] alloc_pages+0x382/0x3d0 [ 898.101597][T17401] __get_free_pages+0x8/0x30 [ 898.106174][T17401] io_uring_create+0x944/0x1980 [ 898.111009][T17401] __x64_sys_io_uring_setup+0xf3/0x130 [ 898.116451][T17401] do_syscall_64+0x44/0xa0 [ 898.120851][T17401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 898.126731][T17401] 01:59:42 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xc9, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 898.129034][T17401] value changed: 0x0000000000231200 -> 0x0000000000231c00 [ 898.136117][T17401] [ 898.138423][T17401] Reported by Kernel Concurrency Sanitizer on: [ 898.144550][T17401] CPU: 0 PID: 17401 Comm: syz-executor.0 Tainted: G W 5.14.0-syzkaller #0 [ 898.154335][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.164370][T17401] ================================================================== 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xca, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x104000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 898.247622][ C1] sd 0:0:1:0: tag#679 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 898.257414][ C1] sd 0:0:1:0: tag#679 CDB: opcode=0xe5 (vendor) [ 898.263649][ C1] sd 0:0:1:0: tag#679 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 898.272605][ C1] sd 0:0:1:0: tag#679 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 898.281550][ C1] sd 0:0:1:0: tag#679 CDB[20]: ba 01:59:42 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x400000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xca, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcb, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x105400, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:42 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000000)=0x1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000011}, r6, 0x1, 0x0, 0x1}, 0x1ff) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r7, 0x483, 0x1) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r8, 0x1, 0x90c625c1370b292b) io_uring_enter(r8, 0x2b77, 0x241f, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcc, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcb, 0x0, 0x0, 0x0, 0x0) [ 898.614605][ C0] sd 0:0:1:0: tag#680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 898.624375][ C0] sd 0:0:1:0: tag#680 CDB: opcode=0xe5 (vendor) [ 898.630653][ C0] sd 0:0:1:0: tag#680 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 898.639604][ C0] sd 0:0:1:0: tag#680 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 898.648560][ C0] sd 0:0:1:0: tag#680 CDB[20]: ba 01:59:42 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x400000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x60ffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcd, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcc, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:42 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x401000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r7, 0x0, 0x0) fgetxattr(r7, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/125, 0x7d) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) lseek(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = fork() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000097c0)=[{{&(0x7f0000000380)=@file={0x0, '.\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="9084ff03510727d4b0a3961742d07860c32c26836145cea91e08a8c7138f90e41f6688ed5306d5b054d4b5174957df9b678f722b4119f5b4f5aba8d3453cf7328237932dada5afecc98be1d3fe57eb08cc3d905574d385e80521ee7370d593be7332b23317f7ff99d1e1886d2d86d9e590a27686b7a4fb03c50e69694cd397634dcae9a59b3eca2ade5e21a2bb2228a2ddb9393d4d6b66a17c7a17a3bee03341ef798039b5841a", 0xa7}, {&(0x7f00000004c0)="764abaed271d373c793fae3b0976feca5269f15456949160e92c3b868db5eb436be5da25ae6e426b7f6c549842e82e069ea2f23c8b2def579b3bd74f01cb804b3ffb8dfe75dd0c2995b1f41c2db4a4593efce14d12829b257f6d70e81c7e698764a0ea8e0a60b3617614da30943f20197b55ffb37081820a7466f70d1b05b2c7dff17a7e8b183c41a4c18e3cdc7449f4844cb6d648a0ade6a89e6745fb122542cf483197ba37120d21f43d1b149af3a2f7a5d072e97a53077c82e9ad4975194bd86ce21047bb1576f38aa08069155bff0c98e9144b85e80522c63279feb9114a626c0d48f507d2df870b16a9b8bdeab39a80", 0xf2}, {&(0x7f00000005c0)="9bbd84c93323b1", 0x7}, {&(0x7f0000000600)="fac14171fa69a6989a0c7b96f881d3f1a1c4b608d47ec8438014fe5adb59a1a75b78d882a15de3c90b7b984dd05ad36eceaacdacb72faf277ab70ce1af46d01c2e13b18df241373791555cc6a76569fe97df297ebebb2ffd12b8a5bf2c66e3f33087bb4975fa0390b438c2b95bd0831eb9b5207ef5d92df88c8dafad377d7f6fe816803749f1a3daa409f5c9e6", 0x8d}], 0x4, &(0x7f0000005d40)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, r7, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000005e40)=@file={0xf759b38f1d521263, './file0\x00'}, 0x6e, &(0x7f0000006100)=[{&(0x7f0000005ec0)="da1c7571eadeade4e1cc819e67fdf58d81772b931cbafd92161644918f2417d1a95b96e8f30a59fa85b45be30d2c49", 0x2f}, {&(0x7f0000005f00)="07eaa4b29859cdd495333d76c677efafe235", 0x12}, {&(0x7f0000005f40)="0e5bbdfa3eac66f496c32917b0aa66b555ae69120f713bc1a661a3401a156d3a47", 0x21}, {&(0x7f0000005f80)="ce12181d9020bc2d9f32cd74f91e6f0228284060d8f50fbf601bbe7747cbeb2d288d9d11974744c17301bfbe9099068a78d9e09410d58d97e584b3aeaefdeb9058200052af7cf0070fdefbb882273d7c46e43f0c587e96e7278a3beb62b7f8b0250d6dbe62ccdd9ac12e93099da4235411cf17fbd6a77b388e57444da24a312fbcd1fcf4d7607dc208ff6418998bac8c6fffea72239ab6d22db9da138b532d7a03cbd5f1", 0xa4}, {&(0x7f0000006040)="6a6018e88c4a45b6bde602b64c7f717e56800cf34bbbf89071e38ef762", 0x1d}, {&(0x7f0000006080)="234d9cc84714777bc8b89bd7325cc057667fdf3e6eb628fd92d4b9dcbf7b63af0892be14dfdd344057f84af3ca1a75d7582851e754c5c67be51eb608d12e811d66dfdebeae5b42b7d35248a3bf17227f13feda35a30f14589c000337228603d0b0f7afdc0769810af424036f9fc73d09b0dda2", 0x73}], 0x6, &(0x7f0000006280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r4, r4, r7, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xb8, 0x240488c1}}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000006340)="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", 0x1000}, {&(0x7f0000007340)="bc1165ad88911809adc375b255544f2f4c60cede5000f675acd689d033dc78957121dc7b2f57fd2d", 0x28}, {&(0x7f0000007380)="ce1bc3817342120a314556f27d71a9aa5ace22ec291444ea01b9ab587894c4b436fc0c1ff7697dcca1c31bee4941091c9e85c0155e26d1adddcf73c1a0761cce4414b6d335dc0809a66724ff2d8ed4b14714a381b391d229d7479f5fbfa7e823f74574fde38a7f5dfa306df09392466b2f537bfb427c9eb3089cb5ecedc1a977579e1bc9376325bae532e5ccf15be6d80f43bec37d4c7dee227c10563a74e93006193d15250eb4f249dc9d398a79c2241d027a", 0xb3}], 0x3, 0x0, 0x0, 0x40000}}, {{&(0x7f0000007480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007700)=[{&(0x7f0000007500)="6c0363dff2a6552bfb6ac086e81c7eaf5bb1d400516855e8c89c9a23fce7f3af0e7cd59f7728e3590eb71a84c3de895137025a2d529943a8ec37a1d672de6d356034eb11dd31affcedb658d51b96b513ea11fd508a0a81ec76b2a0e8526e521a308475b6f2ef34c59d0980aeb39e04bd20aa071cd95b9652ba105cc8db1cc067797bbdcd2cde4fcc0185a8c38a80324502", 0x91}, {&(0x7f00000075c0)="099523f01b765c6febcec179460a64c1699494bfc14255d59aeb4a0cdc29c9bae59f6c38650ad50cb68c74b967955f3afb473a577642298671f27cd916baafe1702e05dca1688d75184d67d2ce6a59c2b988e0741c80eeaaaba79e9bdf3fc73fffc7e8f02656cb489a7c7f6c192f07baef1d97927fc48fd175", 0x79}, {&(0x7f0000007640)="62a3e5b6f93a9c5d5416b1aba6c4d787c3478fc31e12cbbf79c48ed86529abf1845fa302f096f4fae83f075a4e7bb2cbc68e348beaecf941947db25e116784c91cda9e8929f030e30fa05f754a0324bc124212326ab3c79351243b32005c1c1590e2dac905223b95947b5a80a5284bda47f0dee4956fccb72e3540b3c50989da1b4796804ea02062d632cbfeb507f2dbf05cded16532a967db1c2f08c86363852d7c0771e061", 0xa6}], 0x3, &(0x7f0000009680)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x40000000}}], 0x4, 0x4044811) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xce, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcd, 0x0, 0x0, 0x0, 0x0) 01:59:42 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x970000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:42 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcf, 0x0, 0x0, 0x0, 0x0) [ 898.920093][ C1] sd 0:0:1:0: tag#681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 898.929904][ C1] sd 0:0:1:0: tag#681 CDB: opcode=0xe5 (vendor) [ 898.936155][ C1] sd 0:0:1:0: tag#681 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 898.945113][ C1] sd 0:0:1:0: tag#681 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 898.954074][ C1] sd 0:0:1:0: tag#681 CDB[20]: ba 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x10400000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xce, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x10540000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:43 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4af000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd0, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x80000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xcf, 0x0, 0x0, 0x0, 0x0) [ 899.145305][ C0] sd 0:0:1:0: tag#682 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 899.155170][ C0] sd 0:0:1:0: tag#682 CDB: opcode=0xe5 (vendor) [ 899.161537][ C0] sd 0:0:1:0: tag#682 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 899.170487][ C0] sd 0:0:1:0: tag#682 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 899.183449][ C0] sd 0:0:1:0: tag#682 CDB[20]: ba 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xc04a0100000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd1, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x4fd000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="d00a0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f8010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004776000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000f01000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc49028038000100240080006e6f746966795f70656572735f636f756e74000000000000000000ddff0000000500030003000000400001002400010071756575655f696400000000000000000000000000000207000000000000000005020300030000000800040005000000080006000c8379b206e7fb42b090a58cee260bfead4c846be303f034dc9c36f8d819b292df7273d2293865af33ffbc2ef865f281ba02", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ba7d000008000100", @ANYRES32=0x0, @ANYBLOB="300102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000180000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000008008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040000007d02010000008b0000f1010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="440202803c00010024000100757365725f6c696e6b7534f534fb7c3f705f656e61626c65640000000000000000000000000005000300060000000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400060003090100000000248180050000000000080653000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="440202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xad0}, 0x1, 0x0, 0x0, 0x20000001}, 0x44) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd0, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xd04f0000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd2, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd1, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 0: r0 = creat(&(0x7f0000001fc0)='./file0\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{0xfffffffffffffffc}, {&(0x7f0000000340)="c40ddf5d022564b98d8bf15e49757d62ff73a6743ed9e3a8a9692ab03a30007f549b9e7fe8505420f1b49ff6aa4be39c983b9ff1ffaeb2ffe3a5fca7c08374b90857982d772de04e495a62fefbd4388d7afdbe0513cd2d484fd0235b969956b6adf6083def8124e6d256befe45a58ed477823c27f9b43e4ccb932de666f455335676f5cbbf0c8a6cdbdf4b4ac62cc06039206f23cd4f3e2b1f017e8e8c36615cd8db3cfb9689372c08a6bf69ab201298f9d4f0612edc056456747f634e64de898ff31360e41224cd51d98fa4674e65956948d131e271951f63a64787ef454fb7d74808f87e40ec4277254b669d36514f1c", 0xf1}, {&(0x7f0000000440)="a372deb896e69c3b836b2969efa07a5ac8288f359c4b2ce53ed9dd15890c8f33ba2ac520d869f8ad2e89cea4ce2e00315f722bc045ef780562ebd2e0eb120612522c2ffdd4afaa355da0dab62086d89cb478", 0x52}, {&(0x7f0000000200)="5004f8d27a7439781c8e4306053604e75491ce81eec38830bae8a3b022", 0x1d}, {&(0x7f00000004c0)="dcc33933f4c948dbba25b25b052d05e593", 0x11}, {&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000600)="6a33741ee479390e03af261fb98489eea4df47c5a6ccb43dcdd2e4b7856be6d4dffcffe41d5e738085a344c37d033bd6d03808d3b63d8f8f44a90b9c87ac6e6b0701bb005f19502afaa110bed860a860a762f2a80c11ba43ac4e884038d631864f354f5907b292e1b880119d4e3d807fbbe9a104d9a7ad1e5cd28f9a3eeb4d9ea96bfdf4078f3408290acdee5eed950cf380a9fe7e38e1520c43a4d8e8f65d5a9c9e70234a748704ec43a44f8f1f99becc744aaeab3f6920b90febc905df944703067d59e4478164bcc8841c2ef285abf2ab6b4d7f4f797cb88215ad6d50e4f4ab94e57331790d686537b2798ac4df8f7b2480f545d68c34bb2f8c962d88", 0xfe}], 0x7, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x90, 0x4000}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000980)="77180e5ccbba2656f129f9f12dee1d3d847478506946eaad62176d728b270946e16c702b852fa2d025fb1cab6d773d908b931bbba58e4e5311baaced9d1cc737b62456721703544ba58d0bfbe889eb5d77623124950100e4d0ead0d114f25114dbbe59fe3e457e318e9962d57c6699f3e36ddc6534055714b5a825d8758a8c259709a658f814cbfa8139dcdadafc76845c1b72b7af1849e04955a3", 0x9b}, {&(0x7f0000000a40)="e6c45f131926ab7dbf6f4fbc092ef4d3d2ff45dbb000b3f6a80e91d36628dfeccca86fa97873f261c04fc198b9f444aee44e2997d8a605cf4e7890e488b9611b233a1aa4d29dd58638128f699ee06ed477fad3e92496acf7cf2e90aad85edd3f50b3c7454cc7e7f8e87461ad351f5f1f6e7c320c4ea6cf30579c7c92438194f38742f9460a004c08696b268230bb705ee0f162fc1bc2307b806efa4a58a204838a2b63e1755f145bbc4aef2658aeee7df7fd39c81116da19b446e997ef0b558b952bdf5b73b1f21af90e0731d2ac31adbd48c54bc169", 0xd6}, {&(0x7f0000000b40)="752376891140ce0ea7eb51b5c9bc53a469d6a80d07faf4dfb5adbf98f31ea14bb06d6ae24f2f6393a58ad6287ac94e583031dabfdb4fcb6f5ea19cf584c8bbdaa52b5310f16e245c87cb92a0516e74a92a7ed724ff6cecf30d500a05d597338f05285edc0560a8733f46386f02a204e06804709957f68251ef04cc012d316fd6d218c874a9b052e546f94a2ee5264e06c0f9edfd95eb8f47c7", 0x99}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="8cea0d87142335bb802cdc9d314832af66ed536bc56a5d1dabcf389800a0de9d362a516336f451d7d710751b4e4ae036b7869450fe5be3b2b4f7fa1e224c35a3b21af3b601abe1914b4d3be52f72541bc3d953bed26303cfc80ac7378525d319449e29ff9c4e0956c95c6c21e3d7709ad27d45fe147260db2d99aa68e30eef75127b3005eccc3880840be530a461fa33623782cea80b12c9a952eb50f7eecf9e24a9778b2c7005174118c9517008fb0e9a9a2289be983f7c88812f6e2162c7c0a011161eee534ba60c4304bf30eb510c6552273b89ea4f55af6f", 0xda}, {&(0x7f0000001d00)="c317c1f7d602aae37271356d7073a7a339a107172ea8f1c1f6cfe0caf59d79", 0x1f}], 0x6, 0x0, 0x0, 0x48010}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)="988dae99fe1731d44fc5b0668d1a034e58a7931affd330d0138b661c588db8a8982dfaeb764c0ef7885248a0782830eaf3e8ee6d59a47d459ad418a71a67471f", 0x40}, {&(0x7f0000001e00)="6de87bddbef274f047b467e9b13dfff5df1896b788881528c7b5114e655e95d8554f38c0b057757558530032d12c4d89ed312603084d30cfc7b0c86d0e7fc6cbc512cf09c4a8d3fcb87094dfcc221a0eeac32f6f028802856b4986c0ded7b0cf964b06fd15602b3d60b7e899ab6edb11d594c98eee54d8c9899e3f4609fb45cc0cf4e2751d549616571fc5cb5f602807f0d7849b307186e76ed8aab11231754920b51662e74dbdc2f733436a36ef3cfae45afd57076235793330c456dd", 0xbd}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000005bf4601c000000000000000100000002", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x98, 0x4}}, {{&(0x7f00000020c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002140)="1a29577c8219937f7e2fae2d6909fd4f8900949dd5321cca4c757592e4fb98bd265704cf30b758b2db88257383fd833c72221cb32d92d1abf2166f672c40144ea549c71d00e0058213c420b449ff7378548e7870f4f706cf326a67831e89c2077b5b18927f4d769df8cf7e8d88ef5293393830113096de114bb5e661164f02aa1fc2ff7a592724a00887a19e770a5c02872540eabafdc988ea00ab146968f42c25a366217635f5bc44decf60459fb36c00fa63c49a83ec250f5596d752875851cb10e3aab2a044b1f93fceae1ec9949f7cd158540428081d9e", 0xd9}, {&(0x7f0000002240)="fbd349b1a300a2ed56f63b461974f980b920311439149088cd6a5b131bd7ffd5b0b367fe45bfb21b9e6123e207ccdad5e6082e83808874de5fe34cdc32f394612fdab4377bc5d5b92ebe10f74536e571ce914ccf424498c3a048adee3a84bfb01a2896dc40a1eb9b5b88c53ef56e14cbeaf91ed8ade8f2a0dc4362d6bd9caa3bfc55234c1dc629cb124ca5b81f625d7354be0589780da511c1c35bb067a3cd681b4f6a8a9d", 0xa5}, {&(0x7f0000002300)="14126a3e6e8d774750d8d8044a51477581a6ec488ffc77cddae0a48ada0c3765cdfab2", 0x23}, {&(0x7f0000002340)="1a2a5a99170fef9aeef4dc8eb1aed6f8eb976e0a2d0827ab92dd03cf7af60faa8fd02c586ecbce91f5df592dd82cebd8b64e22be2e981a179805ca9dcc044fb0da8e58d76cedcc225f9712c2268ad323bb0a35deb0193fedb46a48b7b6b6c0e3ad0859f52762b232b11612bc8b81eca6729505035853720531abda0701e8823253c568291be24cafd8dd8536", 0x8c}, {&(0x7f0000002400)="4c5f96b2898ca4efc0733ae38bc5766ecbaa353230c81575abfc1bb066166689bf5acc4923d33801056474ba6fc3e0066bc91345f9a5ad4cb264fffe2e17f22d94f4426fed7b2ce07cddd5c81a7537388c1750669f8bdcacb95e8db5e5bd5c55def4a48865277e4d126f47558728000db0b0c0cc4d58f819527d2c5cd4cae572c01038b41da0936b082d6d42532caa7e55867387c09d674057bcc374e1e0c5acf60ba61f2f038e8ecd0c4f077ecde1b38d762d587fc1b6be5b0253039326b605fbc543f74d0391913343d5cc087e6a69a28301aae84bb013a2b24eee", 0xdc}, {&(0x7f0000002500)="0c57bb008fb246f37395dc63b7576d85c1bb54915e9aa2d524cb5a36d4e324a0bfffd74f99b1dabfe3ef9c2fd3c17c5c81d5cc19b6e39dc6b8804941a53e9fe04e6ea05ae9992f0ed527c69a7dd4491e33639541d577a754c176e3c458064bf6d49acdf9edf9312072226b92bd0f265d281206c3d3bcbcbe70793f7d1e7608b0bcf83d3279fc7ccc7e9754ba157b24b3cb69a9df9ea63dd56740b34b8bb85ee59cb7ebac15ef9a75bf431d8f78028de947d03364f7b9a618a11019ef309e03934d4bbda1c2", 0xc5}, {&(0x7f0000002600)="129f7bd0d5de204e52243e5c7ef8334ee0d6428ef5f4c75ddd2b5a510dfd0a9bc3f6c0cf4db59c7f431f261fdc0e5cf32c802820637eb6556254", 0x3a}, {&(0x7f0000002640)="d8f1725ca680b51e682beb", 0xb}, {&(0x7f0000002680)="e759fe7e1485697536919084595d7709774f8d32bdedbdd125d4a0e77450998e3026059fa7e142", 0x27}], 0x9, &(0x7f0000002780), 0x0, 0x10}}], 0x4, 0x0) r4 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = gettid() tkill(r8, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r4, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0xf, 0x0, 0x0) 01:59:43 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x541000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xf04a0000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 0: syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x34) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000020"]}) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f00000004c0), 0x0, 0x5}], 0x0, &(0x7f0000000680)={[{@size={'size', 0x3d, [0x34, 0x36, 0x25, 0x65]}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x2d, 0x32, 0x39, 0x70, 0x0, 0x0]}}, {@huge_advise}], [{@hash}, {@appraise_type}, {@dont_measure}]}) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e80)="bfdeb9a9e838ee5d8965cc8fdcce3cba84bee0f2eb847864f6cdbba75ef9b0e543", 0x21}], 0x2, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000000300000002", @ANYBLOB='\x00', @ANYRES32=r4, @ANYRES32], 0x98, 0x44}}, {{&(0x7f0000001280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003400)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x8000045}}], 0x3, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x11807, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x8860, &(0x7f0000000040)=ANY=[@ANYBLOB='sb=00']) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{0x20, '{\\'}, {0x20, 'ext4\x00'}, {0x20, 'bridge0\x00'}, {0x20, 'bridge0\x00'}], 0xa, "97c199a136af85c8a3045d929420e8ac5fc46022abe300c8ebe23c76371c23caa92c910e01390379eb2584247f36337d1c9dd5c174c37170dddd41ab1fa7770cd5a2a223f11bdccc5b67c26e590c5e71457b51f280de5b1dfcb406bcf3484aea74611cf89a9623a21789d1a01235d501af49d5cb0ca54a4df10d12532ab9c124cfa0150ac0bff993c11a66ce6e233d49c27550522675b1afc95ccfe514a2b21a8c14f3fbe32e4490c46bb77221f7506b1f16970a3970c918e0cdccbb6f3467733387cc883257a162a645d82c3ad4c76993b1c4dfb340e0c28d2b17dcc7b6c3a669805f060fdf782c45bece9bc816016a0d67"}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) getpid() 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd2, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd3, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:43 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x800000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd3, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x100000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:43 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd4, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd4, 0x0, 0x0, 0x0, 0x0) 01:59:43 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x970000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:43 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x200000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd5, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd5, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:44 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x204000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd_index=0x6, 0x60000, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/5, 0x5}], 0x1, 0x0, 0x0, {0x0, r6}}, 0x5) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xc04a01, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 900.044838][T17666] EXT4-fs (sda1): re-mounted. Opts: sb=00,errors=continue. Quota mode: none. [ 900.075289][T17693] EXT4-fs (sda1): re-mounted. Opts: sb=00,errors=continue. Quota mode: none. [ 900.127498][T17734] ================================================================== [ 900.135760][T17734] BUG: KCSAN: data-race in compact_zone / compact_zone [ 900.142616][T17734] [ 900.144929][T17734] write to 0xffff88823fffad90 of 8 bytes by task 17735 on cpu 1: [ 900.152632][T17734] compact_zone+0x1449/0x1ce0 [ 900.157306][T17734] try_to_compact_pages+0x317/0x840 [ 900.162511][T17734] __alloc_pages_direct_compact+0x61/0x330 [ 900.168324][T17734] __alloc_pages_slowpath+0x5e4/0xbf0 [ 900.173698][T17734] __alloc_pages+0x25b/0x320 [ 900.178286][T17734] alloc_pages+0x382/0x3d0 [ 900.182704][T17734] __get_free_pages+0x8/0x30 [ 900.187289][T17734] io_uring_create+0x944/0x1980 [ 900.192138][T17734] __x64_sys_io_uring_setup+0xf3/0x130 [ 900.197591][T17734] do_syscall_64+0x44/0xa0 [ 900.202013][T17734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 900.207917][T17734] [ 900.210229][T17734] read to 0xffff88823fffad90 of 8 bytes by task 17734 on cpu 0: [ 900.217845][T17734] compact_zone+0x344/0x1ce0 [ 900.222437][T17734] try_to_compact_pages+0x317/0x840 [ 900.227637][T17734] __alloc_pages_direct_compact+0x61/0x330 [ 900.233444][T17734] __alloc_pages_slowpath+0x5e4/0xbf0 [ 900.238812][T17734] __alloc_pages+0x25b/0x320 [ 900.243399][T17734] alloc_pages+0x382/0x3d0 [ 900.247812][T17734] __get_free_pages+0x8/0x30 [ 900.252395][T17734] io_uring_create+0xa37/0x1980 [ 900.257242][T17734] __x64_sys_io_uring_setup+0xf3/0x130 [ 900.262689][T17734] do_syscall_64+0x44/0xa0 [ 900.267186][T17734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 900.273081][T17734] 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd6, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd7, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd6, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xd04f00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 900.275387][T17734] value changed: 0x0000000000131e00 -> 0x0000000000137600 [ 900.282571][T17734] [ 900.284880][T17734] Reported by Kernel Concurrency Sanitizer on: [ 900.291015][T17734] CPU: 0 PID: 17734 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 900.300816][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.310866][T17734] ================================================================== 01:59:44 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) tkill(r5, 0x16) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd7, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd8, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:44 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x604000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf04a00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd9, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd8, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x700000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:44 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xda, 0x0, 0x0, 0x0, 0x0) 01:59:44 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xd9, 0x0, 0x0, 0x0, 0x0) [ 900.600269][T17824] ================================================================== [ 900.608360][T17824] BUG: KCSAN: data-race in __reset_isolation_suitable / compact_zone [ 900.616434][T17824] [ 900.618750][T17824] write to 0xffff88823fffad90 of 8 bytes by task 83 on cpu 1: [ 900.626191][T17824] __reset_isolation_suitable+0x275/0x2c0 [ 900.631900][T17824] reset_isolation_suitable+0x125/0x1a0 [ 900.637444][T17824] kswapd_try_to_sleep+0xd2/0x310 [ 900.642465][T17824] kswapd+0x133/0x300 [ 900.646439][T17824] kthread+0x262/0x280 [ 900.650498][T17824] ret_from_fork+0x1f/0x30 [ 900.654931][T17824] [ 900.657238][T17824] read to 0xffff88823fffad90 of 8 bytes by task 17824 on cpu 0: [ 900.664843][T17824] compact_zone+0x1425/0x1ce0 [ 900.669505][T17824] try_to_compact_pages+0x317/0x840 [ 900.674694][T17824] __alloc_pages_direct_compact+0x61/0x330 [ 900.680491][T17824] __alloc_pages_slowpath+0x2aa/0xbf0 [ 900.685848][T17824] __alloc_pages+0x25b/0x320 [ 900.690419][T17824] alloc_pages+0x382/0x3d0 [ 900.694818][T17824] __get_free_pages+0x8/0x30 [ 900.699392][T17824] io_uring_create+0xa37/0x1980 [ 900.704235][T17824] __x64_sys_io_uring_setup+0xf3/0x130 [ 900.709676][T17824] do_syscall_64+0x44/0xa0 [ 900.714074][T17824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 900.719955][T17824] [ 900.722275][T17824] value changed: 0x00000000001bea00 -> 0x00000000001a0000 [ 900.729358][T17824] [ 900.731660][T17824] Reported by Kernel Concurrency Sanitizer on: [ 900.737784][T17824] CPU: 0 PID: 17824 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 900.747568][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.757604][T17824] ================================================================== 01:59:47 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x1000000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xda, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdb, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0xe) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r5, &(0x7f0000000180)={0x200, 0x0, 0x8}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8) tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x115) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0xf, 0x0, 0x0) 01:59:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:47 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdc, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4000000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdb, 0x0, 0x0, 0x0, 0x0) [ 903.428084][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 903.428109][ C0] sd 0:0:1:0: tag#661 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 903.444470][ C0] sd 0:0:1:0: tag#661 CDB: opcode=0xe5 (vendor) [ 903.450729][ C0] sd 0:0:1:0: tag#661 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 903.459693][ C0] sd 0:0:1:0: tag#661 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 903.468630][ C0] sd 0:0:1:0: tag#661 CDB[20]: ba 01:59:47 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x81) r1 = syz_io_uring_setup(0x640f, &(0x7f00000002c0)={0x0, 0x40000000, 0x20, 0x3, 0xfffffffe, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x5, 0xfffff801) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r4, 0x27, 0x0, 0x8, 0x4}, 0x7fffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() tkill(r6, 0x34) r7 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x4e000, 0x74) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) prlimit64(r6, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r8 = getpid() sched_setattr(r8, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r7, &(0x7f0000000340)={0x2000}, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x4) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0xf, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4200000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x14ac000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdc, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x4702000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdd, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(r4, 0x3, &(0x7f0000000200)={0xc, 0x400000000000}, 0x0) r5 = getpid() r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x34) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) wait4(r6, &(0x7f0000000180), 0x21742be31697c5b1, &(0x7f0000000340)) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0xf, 0x0, 0x0) 01:59:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x572b000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0xffffffffff600000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:47 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdd, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xde, 0x0, 0x0, 0x0, 0x0) [ 903.665139][ C1] sd 0:0:1:0: tag#662 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 903.674911][ C1] sd 0:0:1:0: tag#662 CDB: opcode=0xe5 (vendor) [ 903.681171][ C1] sd 0:0:1:0: tag#662 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 903.690123][ C1] sd 0:0:1:0: tag#662 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 903.699082][ C1] sd 0:0:1:0: tag#662 CDB[20]: ba [ 903.740227][T17911] ================================================================== [ 903.748324][T17911] BUG: KCSAN: data-race in compact_zone / compact_zone [ 903.755269][T17911] [ 903.757587][T17911] write to 0xffff88823fffad90 of 8 bytes by task 17927 on cpu 1: [ 903.765291][T17911] compact_zone+0x1449/0x1ce0 [ 903.769964][T17911] try_to_compact_pages+0x317/0x840 [ 903.775158][T17911] __alloc_pages_direct_compact+0x61/0x330 [ 903.780966][T17911] __alloc_pages_slowpath+0x2aa/0xbf0 [ 903.786446][T17911] __alloc_pages+0x25b/0x320 [ 903.791032][T17911] alloc_pages+0x382/0x3d0 [ 903.795440][T17911] __get_free_pages+0x8/0x30 [ 903.800018][T17911] io_uring_create+0x944/0x1980 [ 903.804862][T17911] __x64_sys_io_uring_setup+0xf3/0x130 [ 903.810312][T17911] do_syscall_64+0x44/0xa0 [ 903.814718][T17911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.820606][T17911] [ 903.822926][T17911] read to 0xffff88823fffad90 of 8 bytes by task 17911 on cpu 0: [ 903.830534][T17911] compact_zone+0x1425/0x1ce0 [ 903.835202][T17911] try_to_compact_pages+0x317/0x840 [ 903.840475][T17911] __alloc_pages_direct_compact+0x61/0x330 [ 903.846289][T17911] __alloc_pages_slowpath+0x5e4/0xbf0 [ 903.851651][T17911] __alloc_pages+0x25b/0x320 [ 903.856224][T17911] alloc_pages+0x382/0x3d0 [ 903.860649][T17911] __get_free_pages+0x8/0x30 [ 903.865239][T17911] io_uring_create+0xa37/0x1980 [ 903.870084][T17911] __x64_sys_io_uring_setup+0xf3/0x130 [ 903.875526][T17911] do_syscall_64+0x44/0xa0 [ 903.879930][T17911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.885809][T17911] 01:59:47 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdf, 0x0, 0x0, 0x0, 0x0) 01:59:47 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0xffffff02, 0x1, 0x0, 0xe04c, 0x1}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x1, 0x10000000, 0x1, 0x101, 0x10000000000000, 0x1, 0x7ff, 0x6, 0x5}, 0x0) prlimit64(r4, 0xd, 0x0, &(0x7f0000000180)) 01:59:47 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xde, 0x0, 0x0, 0x0, 0x0) [ 903.888110][T17911] value changed: 0x0000000000203800 -> 0x0000000000215a00 [ 903.895193][T17911] [ 903.897495][T17911] Reported by Kernel Concurrency Sanitizer on: [ 903.903622][T17911] CPU: 0 PID: 17911 Comm: syz-executor.0 Tainted: G W 5.14.0-syzkaller #0 [ 903.913414][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.923454][T17911] ================================================================== 01:59:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:47 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x2040000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4100000, &(0x7f0000000180)="d899210a5e749e5122c19c9ffd729fca59c59c5572159aa85dad5329d6617bc17ff35b6f77ff89a7328d60e7ffe0982d8cd86f8d68a119d828e1f7c44639e27c4fedfe2ca891a568d7e1ea4750bea537b78e580d9364e5a6951c1e6c22b50aa97dca8800cda1ff454b6e23140a607af15567681bd0c2da153eeed93ece334b7f73d9672c746c284937045c3f466b23f29da07864d80f1df1dfda43469a2820b706ef6e6f53439e12", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="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") r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 904.030174][ C0] sd 0:0:1:0: tag#663 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.040106][ C0] sd 0:0:1:0: tag#663 CDB: opcode=0xe5 (vendor) [ 904.046367][ C0] sd 0:0:1:0: tag#663 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 904.055409][ C0] sd 0:0:1:0: tag#663 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 904.064384][ C0] sd 0:0:1:0: tag#663 CDB[20]: ba 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x6040000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe0, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r9, 0x0, 0x0) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r10, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[r7, r8, r0, r9, r10]}, 0x5) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xdf, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40, 0x24) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x7000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe1, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe0, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) gettid() r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 904.251181][ C0] sd 0:0:1:0: tag#664 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.260943][ C0] sd 0:0:1:0: tag#664 CDB: opcode=0xe5 (vendor) [ 904.267190][ C0] sd 0:0:1:0: tag#664 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 904.276122][ C0] sd 0:0:1:0: tag#664 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 904.285093][ C0] sd 0:0:1:0: tag#664 CDB[20]: ba 01:59:48 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r6, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x76d4, &(0x7f0000000180)={0x0, 0x7834, 0x1, 0x6, 0x310, 0x0, r0}, &(0x7f0000656000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x9d, 0x8, 0x0, {0x0, 0x0, r0}}, 0x80) r8 = gettid() tkill(r8, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe2, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe1, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4000, @fd=r0, 0x3, 0x0, 0x0, 0x10, 0x1, {0x2, r5}}, 0x8) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe3, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe2, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x7cd, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5, 0x110, r0, 0x10000000) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r5, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001880)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x4, 0x0, 0x1a, 0x6, 0x1}, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x1, {0x0, r6}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() tkill(r7, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0xff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1ff}, 0x0) recvmsg$unix(r3, &(0x7f0000001800)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001600), 0x0, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x40, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x1a0}, 0x2) syz_open_procfs$namespace(r8, &(0x7f0000001840)='ns/net\x00') io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x10000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file1\x00', 0x4, 0x226000, 0x12345}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() ptrace$setregs(0x2, r5, 0x0, &(0x7f0000000200)="d4e69bbddd1fb7af7ed15abb5a617a4bb9a43381c40464f926257f47") sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004700)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c4200001900000125bd7000fedbdf251100000008007300", @ANYRES32=0x0, @ANYBLOB="5c3dca984a32314c8c572dba82705ce0934cd259b38c38ad0cb805326afa897302de68c3bb621a02b5792e6d4a500e80552f3861201d8b82c5f08a68d006bb9b8644780cf4deb89b24e6359b00e77790e35a4968d15a7a0183a3aaf8e665860270f906318a8014005d00fc02000000000000000000000000000108005900", @ANYRES32=r5, @ANYBLOB="08804200", @ANYRES32, @ANYBLOB="f13e0306f8f08f187f15bf6c3ae69f13383fece97e7de98fe14e11b13052d506f289b38fcd596a6d4d4de1ea95f0d04d44606b0395e3ac0d051fff9e50a50873548134238c54a78d67b02d2455afc39d5e5487e85703e4b220dd0ecd6fbf17be102ef762e2162a64b73d012426a20103c130a21bb61e7efbb70e1a8b5025e0d86071995c4f094643f5f117a21d84857b556ffa2c45d3c8fe3bc1a6617191ad2796cb91adea1c363b42a042bd4ce8f0971e3a4c0fd868f76d370765163fa037ce97b7c2b668aeaa5a9caf72c7e3056a391dbe5a5e83cea97265fb292668ce2527b48fdcaf82ba8b1162f3686295db77171b56f2a4a36c818e2c1a08d6356c9ca59bf04bd6adf41d16532598c6fdb76a6ae6ff6e2a6f4df57029fac0c570479a1bfd8a9fc87df058b28eee8c61e1803240a5df2e9f488ad4c28678947d9d358cf89016b42f34b567c917c525050b3af88904fa9beb1dd91b43a1eec7f2c1fc43a82006b5b5e3bea087477222bded3cf0b5d5030d3bda0ebbda4b7925aeab2df7d64d615cb704a59671f52651ae6d64930bcf24c48878ae7cc4c456b6bdec349b3d9ee197ba8c9db0a1a0cfb69b5eba94bfafe8a4501fd1ef5fbe82a3bc887346184142b7d44aba9801f2867d1e64d319a630dc3af9e1a9eea68590511773b2cc08466f0fb2fd511bee116c3f2ee6c98f485813f1b38a8498dd9a0e41ddb7aecacb470d3485dc570d25e19e7f3e0c59d9d6687ed3582a23485eca5d07393fae4e20005267b33382cfdc246956e4e21438d2b7c1cc60986cdb3b73c45fdaf67db8a8c957ea8bdf8f23f9df262078872a63456dc57dacdef3b60dcd19e2b7c903ece9c8070194dbacf29b59615b02d860107be70df03432cd4e81d658235310c242e23f8893da94447c09272d64ba9e7c7b3c36b964f29ab1b39b90f4c5a25375d7e78c044751dc203ce375f17a0c6cafd2f99225caefbd7150d17eae9d265b7578a4eea64b86664936a79dc0a7c95f89760748e35d6df3c9b6500f0c11ce4345ab7a18c939890328ede3989d336f9cf92d2178409c5586c65056b0b8ceb1c094f02613eac0dccfc0c0da7edccc8dc6a745e906931c0deed3c5452c46b4bede4427718d2b343c07d47de50e3d25eb3eaae76cde5bb0ea81dcf534d74e90bfb3073cec6293714e1b247d3d2fdb27f5b56e94d4febbfc8df8611e5013e7fc56e524cffe36b89b2ba0fc09093365e0df6e336ed2e9373270e1d11c1b951927cb4a737b0d0687d56d248a7fdd7062ba04d44302e8c26d28dc6569060382bbab02ef2b750b52ebe999a7017bcb60b5fad1dd4cffdce228ef642af763ddd23de33b09b058f30047daaead5ef99743a16c8a624b2b4ea8fbe1259522248220c26e53f7565fc468a59a6213893aab7761bb7e33d7507b9edd52b13880ecb1394e5a20a43736cc030ffb29f33767f02566542d6c5453a00fb73ae0aebf207f5d219955010cc0872bbd6867c887d4b7cbaa651992f8eb584dc82516e6f57b03765f54999d0ab22edcee0dae3c9dcb07a1177c7788424f95005447fcd3b402184c70b9dea3803adbe13341d8e5068700ee932609afbffa387d0911c54ee85ad4663a9f1f8dbd546f2450eb65f3b0ae4185ebfd09e0824632cfd2e86eda00c6f3a2cf3cb1828debcb40acf9086b8962e629a234322c5370e3d0d097c78c5e0f48e5426cc3d4c935c8e4e4bccb111c92bc3f2d3fbc9b192c3f00f07c0c7bfce0cfef66f57d4ca52d6bd73bd67669112b4caf857c0dcf7293967ecd983513c624cba03c040ff40abfdd7fe62e2ed2746462a3b35bc6cf7631c9f1ceffb89a4308e69fc38dafa2e4f842465a3da12ae466bd4004ebf8de7813096b892b5b307ed7e3c4dc79a95e3e7203228751283ed3d913a0aacff192cb2c2a6f784493748cf37bbf6fc93c0b7969637fc13117bd948f80f518fd7f86e969416ffe402fabab4bb347a252054dd7308863b146199acccd68118c26ddca752932cad53a6d42e8e5868f15aab1111d6fa8c641210392573df5cec9c4f21f1661e9873c3af26a8ad976cd26f81a57fc52a69c6cfb38c3966742aec521dbf7439c1f0016559e9c2e3728d666f9892f172733c7d65ea197fbd95031aa6bc9c04e8df0d9ff173cdf6f15ae075a876b38457ee68167663f378e9185809a0de15bf4e7a2056f4b58263652369f86ee647727693110cb7cac1794da4c880c4df0fbce32a03d287fd2c34e67877fae57e24f3e3c7caf05eb3ee46b294e45805bac80afb911e074388aa92b841262faca7328c997303a6aa137cbdc7d19e1149c35915f19781bbaa1dfd6dd13eca28e6dfe8b467095fed76508b77f63175eacbce4fe382f7e5089c72c0e15cf43c86625c4e87ca30521d783770a0def869d0c8c33f361b26ffd0e3df4b7946f8a6688a768735af2421cc81420f8f18ac70af430a8d95135cfb0ae324a201d6ace7d4de5af984cb2c16feb7b494e4b6fbc13d470d90c754af606af4438a15eee7b1f6e5bed57ab1ace9dd20783c542553f503c8db4bfa9294fb6192ef39d47d777c8ed5ee2ab91bdcb86c13a5c75b9f39163de438a7da3676a228dd8f8a9f763cab27d899995283909dc149ee8e4ef9a160dfcbc2754e3d5ba4a473bff050936c98b498f50b73f8c39f70fa20bff0d8d27c6bdc199ea599289ff39233c7ad4c31cdc6fc33f1a89a15fd2595bcbc43d9b53f18d874c779f50db1e2a3296868e6327f4d7551a22703c5105a2b106ffe8286fed9757b78f15a7127e666bf703fd88aff6674998ac5dc531312e25fa88471564a263072e51dc9b61415df8c0cc44a4d16a5cfa7d7f0ad99980f6c7cc16ee857c5ba42baf25c27e7c96aa59bd3134d1fed2be8581f67b1e103827b2d78fdf54bd45e4617b04b895a10ad7c5710d9eb923664956e4b1114fc5bbb251f2890589853deac8562547b0bee1dc5fd78aade2c9f85c6772a1a4d62e40802f70f4834795741d4749e823181209f4507e58fa9da2719568f46dd2c95622b186738e978fb764992aea459ee291a94367c94151432daeb52139c1548ba3557be63ad055204b282a5fbe0d4c2adf87512b1e192bc41b024870d78bb31cffe10a691601afdda8a75083d6cadc821dc53e2c5a3284fa8a6ab80b80812746e27d1f9d37d480176ac3929ddaf7c5d5e0ecd20dfcd89c33b8f310629374c2719a39a765af402f5b027d2640f8b6ae8829224823d6e2e5324de38068132cc9c7a054192163cb21bb6f0a5ff279e3a9eb1c1f751b6a6bff69ba45ed4cd4d5f7fbb2691ff8be629865c31896f13035e7e00073edfc720ff4d407d3229a61a2d7081fa95d25ae22fa6af69d683674e8eb9bdddd85b8d0cfe3fe6604d00b9ef402f1b5e5107715c1ad39eddeff4a279d96217f7051a424ba650e57a4c27bd57c03696853e4a0dc8335e2a70bf13f9fdc28bead302d749031341fd2c9b1c4f4e7475607f3263a100eb442d217bf70c5ba606e66461d096e20387969f137a03b1557167a2c68492b68c0abc1482c51f5da13b1451ca05c180b979df4d987d2b7649825a839479ed23973f025467a5dd932c59e90c46b3eec3ea35650dad3416368f2008eccd44f22be0b5520e53b38f829d4db4606bf11246153d0b1d653f79ed6a8db1c4a4470a4b181640c1e4d1b9db170593c0f61dfc402076ad01f1213713a0f8061f73bba126195712facfed2bf2321539ec9021b57e3f3f83cb423ea2def07fcd304905c48b023a0434a654b105789a3fc8daa8285b47ad19f3735e4fb38ed5cdd32c1432e2a44eb4b426d19a01d2cc14b45b3bb2a8a65fedb037364e144b357ff2d5f9e681379c994f011fbac18005a5ffb44a5920aab56b3677fb3dd9783b79117cd919805afefdd021c21e6d9f7e9bfbd94318b7dabed5a766965134a65b606c002db2c6e2be3c61e3846e0048f77adf96566b8fdfe8ef36db652e88d4ec4809a2d823f9b1b4cfea05da90b40eb0fc5ccf82f82a6b996bfd8f1bbb9206fb65965a4f6e6a578bd9444732eee64ac88c7ef58414941e539571c80e09060230a92e474111ff35e0ae7f6600ac91fc238a2aa1a119cf793e354b01412ff88eac1a7b8ea66e6789e62039ba69ccdd6db231b4920fac84819dee630963a2008523c0d1b8668e51d1a3ee935296519e219eecfca2e345322ff4cbe6edccebb78254b6ba86b62de24f45b9c433ae74dccdf903484e6306d4b11dfcd64fcb0f0ae0ab64070735a6640439935b2b1a75173b90327e2bbf14bfe140793a07df29de943603ca45d71b5c05f52f94cb609423c0812e73434920d618dfdad78e22d2d285a966bd33475746c3fd0a6b2de7b0c49fcb50a9ea49ca37815843e364099bf6356653b2e16249743527adeec2ae695ccd1b4d3fac2bc017e426d971c162a92868954c20e8d2a7bbd310a7fd27a5a1355feb3cffe22614fc24aaee4bb37c473bc20510476fa3dd0a74cb4c98fe90c3bd46430c867c90fc739494f395792457376b1f86e60bac5ac49ac26fc344c34eb91618f4b6ffa4b6bed87ea5efb499aa029637be50b844095e9942ff8bd419cf1ddccc4156ec4c245d21d300fbf2e67d754c8b395c5e02ee191ec552a33b00c0779520644ebf2f80ee111e3d06a96ace03fcf9635e926ea1c90e95f4a01b91e0fcaaa8fa6f05f88fb1abf3a566db0974df593083f46d39da6862a22edbe738f462e82ba91af78c6801fc2f3382565bb1390018dccd72f3ca15267f3875b572772b74c1622cf60a2a14231adf148513d30fb83d875d5d5ef2a2c61098bd062f62f21fe364e277446287a4c2478362463e862197f4dfc8162fc6b0f494e426443055ecbe61dfda67ce48a3d0c8dba4ba32daa8bbd966c5eb0b43ff7de93ac8581a91fff79e7c6a10406928304427d15dc950e9bf473c080193fcaf76fe0bf0613ba62610525001d213829cce8e00ccf4125dc9e747c00d4aa3be33520ccb65cfb3eb277e4fdb5c0a876fb6fd286c16dd1155ab65f21cb54d8162820fb18f9d0b08ff92d9f61641d790d1bdca8ce27cf75973516153711523eadef755c7e9054fd632c86c88c257740e8b766f887ea6f633d50e4c32b0409df06c4b8f7a6e9ccb72fcd94287088c97a3ab65afb93044df510b61889ba7f40156301952af9a7519379390d6a0caa68e350b82a0f816efe8f1e8ab7690a829de8b2684bf2d657b230ace417231df19924da12ef4d7f8fdb24a65cc3071434223dbf37041cf8b7a1e170fe5f5eb75929602ef7ad8ffaa9d718083273c18775f11dc1379d03d6bdd8283193c16af29621cfdc8a79db2b188479cfdab4667c203eedcb84dd9678c9190b158a0d67dc460f9be485326e785ffccf72f0aae544b77a6cf223216b07d2f6596276e901ce1b16bfc59e137ef7629470d9f27413abe6a4b263a14bd4650fc3c05263f92b83fbd49710ca1f851bacf82c522ce01b8d6d5458d1d40d912b37f676dd905629ae1efd17c118a789623d96acf6ff63ca129672e50a2416a4fc4d235dc0bb45be791a083b2f223ceb97aa3e9e890d414db1df470e697bdb18cdf4fd44bea144491883481d08745b83183c12c5c1ae72e3fb4c2e3a76410577a9d7b64edbf273e5d674d6c37ff0e4f6644af5d1dcf3d7d4348d48548d8f00385f5ca007390669c1e9fcbb1a970d5b153afa20c08a4b120f6773f81e3aebd4c81e905c89d79ac0d164239c237706916a50c36c46b5a047a4d33af6c4dbdb64c51bfde0a5ee716992ace6bb80fe762764e91caf8b67fe6b5dc18abc0ef43dfd754ed33bf89a14c807dddb2f8a2be13550e99cf1d8752b57a6107a45ebec3c78a836dfc910ddd14d16cb5340a7945299090bd193ef77f402f61340e114c08332ee25a6249fc42e2f107f01e7cce4cbcbd6d07dd0cb58b52aa57eba7ceca8a2cb10d6cd7328202fc6d07362023c583b95a264704e22624fe1c16c016ce5f3429255d7e26cc4c768f1d13c997bf6cdc705f37c2d65178939c5151bde9eb5de6f0be95de47e9c70980db79e81a75eecbe91f16f734386e56d82e3ff326dec2bcda5a26e30000098d2302a395357fab402e59aa1d40686605c5a7c238a22f1a5dc4514fefffdfc9a24bb886b5e6ff315e8d86133f1079e037db89c79fd21c144e11f29695ef3e31e10e00398390cc277442887a275ba52b5d061b9c502f4fb406673aa58b4bc3af38a95acb4634b38471a2789af55954bba08ee75acae6749f26b82ba94be930bc2bbb1535f0c2217a2c7181b374aabd3e273214cbc32f48f8b151e8b015479a46369804a2a9a677418faceab2b633bc781f103d4619f9af9b335cbeccc138e4b3a2368884ace3f0291ea42f61fe979dfa9d28d077538e69f548d824ab2f5486e53b95c0101b289dd53677c4c370ec3c5abda13e8d06c76a5a2aa60d63b88f68ca3ede2de66176e80b2ec7b1786697c2f3b0e1436a1e22b0e4890f558807849dd4ae04d3f7387d417c381d01ce9328d455028b4bcc1cabb0ffa4fee42231cedc3b89b8a14b2b3f84181cf2c3238d0d2ec0159fcb5cbb7c9684b4edee959079857752dd7f32416c66141f606bb4e2ceeb2ffcf66f972cf612bde368c901c5c3b51ccb97f16d995ca16d55a69ed18560cc8614d78c0479d099766750311b64b12b2b0bea3ab789d6745792806f7012dac1fb4ddaf6b3766120fabf7c4df89fcb15193d532aa68b439a30584c8bb64c015845f7a047d49ce012d28380ee1bb4d19895fabb959eb4104a95ae66453c882c1a1237e5edabc7d9f317f1f77521aaa37e4f472aa874ad2a9cee0384dc44689aa59dc85ae4fe0d3fc62c2454252faf22d44982ce050cf1dd9f9d54d847186e68fd3170ff5691e113cb287ce6b2d0067cffdde5de0533e6829a8ce8c405eb566a2d3303b7e8a461fa0230f27729a6239d16abe3283360923b17e6b31e980be5f8df9b4d0a9fa7d47076b3e870b05bb4b2889d7ba57d158e2c37614b797bf8224fb3fce8455f814fa570ff7f484d34c0c3a2bd8425010f9545f81dc8efda687719ec882127869ad6d98a8abedd25fabbe68a0aa4a8a63cf829f5a2ad38174341e486b59824adf58cffe2c0f883f5d79f7cbd84011ce64896be5a3f54154462b6621fcfd80f7758be0d18fbe797266a74126240ba3c9897523f2b72c4ecaa3b65671b9d6f8460c26e5cc5d04ac2419d7d4d5e47d440df91e1fd68e4c043b613b74d1d71625335689b6bd2d8758983667cf54e28c7310f61ba7ee901a031ba23cc42c7ad8f246b0c0b40ecb532e627be6acf346c01319e4a1b59f52108a3ff804df690c79d36925183432f90e618969f8073dd8d9020f1d81515fcbed0ea4f437489179b18c76199c14f2bdc503f9badb6fe7b4da599807ac0c3cd8df2326bda31ef83c84d5f71cc7c3bdabcfba7856ae20c913f559059c7f74ceda9eb2a8218b9a70676f1043fd3330ae7d90b6639dd1706f1424d898247423e5d387797658b486bf2c25b8d1160292034b19f9530a913e19d1baa12b6f13f2254bb8c57074935461db02ba0f00ef87339eaff12e539f67a7048f08a3aec16088d1e2cd6788daed59345f82c157c71f4cffc75be6f7af55fe3182d07e1f988d601714ebab60b828707760eb4ecc74bbd86daf9156364c73a921ec837991836983ee03a1f3a9059105d0cb6f62fab89e17619752dc39eb3223013959243843f22e084792d3105088db54e7cf6b2d2ebe04e699593ca45b07466fd791dfb482c5bcc04a0661af217e4217ef58e3df264c304b0051be89f77588b76e080b003f784128dcb93b36b63c197de39f5482e487e00d62a9b7636cb4244822c6e19cdff6a7c2342776e5c1ccaf3e997ad1ac1ecb32ddc70b4cc264efb1986f76c9ca6a6214e0da169fda7c2f079ce3330ad9dcac9ad1388b241b32fcf40b258c1ede828fe25d7130656272e8d30186d9e7fc7dbf8c9759222be17fa5c699452ee64bc3adc341401ba1125dd051fbb17a460a006a1d1e91865253a2df4d7b1b2974c3f0667205bc7a350d8cbe2c7f1a338fa0764fc7879b28bbcb7eda758215d96880198e2d6366d2b418adbc0a3a266dafadef0020b560dfc93adfa46a68c7f7c587d41c4f1eeab5fb786988821e621e429f6990910fefac82485b15c4032b093d8594c59f40d53f49c3686081018ad72d24357272508a6622333ef314f37ff3bcd5d44352cd1c069defacfe2dd6d499e07db0d1b46cc52ee25155a880899732817eb95ba41200eec8efe05d2b356e6692918e270de39b536d4dfb4543fcf6e8d08a4eab863983e1adb0b6a364631c698a510f300c7214d5ce36d3e2fcf8da1ffd5c1f63921310d07adf673ed2eb511644e8dec7f9dc3a9426335077a20c9cddea59fd26b5d6e401fae6a704bb4f352b29644b240422f6eaced57534c3bb88bde15100fe21a95403b095b9d70ed505d63030a0658df4be4dca646eabed8d0aa58d473b4f1834a10c4081634f1ccb5315c43942ad8affb041ec48eb12aa6fa1dbafc509ed7e94b0e35587d961e58f738d03f523ab273693b27834f58c61bb5aae107017637abae35d7673bb1947fbc2eb21eb94d829ec2658abf9f6f26e0567b44d62436c92fe7326dd04d098c06fe17a11a8cbe9a6a463bf77c0656814993e7967d20ad050e99cd689238915c2279c4a6bb4112eb9e9e23b451a64daeb862afd066a48b6f3419a8abb900282209672abcc1c2852415a1f5c92dfce18d741611be1af4bf2a7d4f3da6fa2625713853fa7b6c70598f7ee61091d2de29b0fe0dc5409acf32d8176525b4d40bd48354a956fb95f108d967bcb7fe42f3b7f715303eb22f3dd63a7ce0f5f5f2835bfa79f0750b08db1586ea9bbf35fe361b1cb38f5c7d9b5a0b5b2467ae54e79061891c4a2317c2515d1741abd6caed3614fe4fa68dc0e1c83500f8e0947cb26f100c688290a5cff713719db9aac98551726810ef38872f507e3f713a122d014817811d023aa53b7f2d47c82abf56e391a949cec791fffa66e6a2a7ce3ac82e020e66a9f716b9e9c447c20da50bf0ac8179d08421a591f40f764fcd5ef802af11891b0bf1f0a7bb63bfd22b8707cdc1139820bb7c8f42a8577cc644148e84c723cfa4e45a8f4ac6fd758d5422761286ae7a654096e103105738cd17bcf0eb9d3d046ff2c4a67a518dd009f964b21922022ba400f6993ccd8c3a3a1a74b465f4b6e0d6ac26a47d400bad640e1623592b09fd7cc447cf2a9adb4672f52aab6d907e71c0101631f2c25d9a4d7a93048bac3adcad4198183827d24377ac91d6d0167ab6f24e9d1980cae821145cedbd3ab3ad2df8dd12eb651984f896cbae7da2efca533f2d524b8c2b4a392e3a7548e6abc272ce7b3abd26f5da471682d65017d489b00240f797d14235296a1bd2f5ce0786c82a2c44e82dcb500be370438c632c6e25e99cb2d3c44b4192150232d9a7a21e4869718746d6cbe23cefc96df4d81aca9f9f2ed32da9df56e1e71c701bfa8b1db50938cbf0fc6b63f27427218b184b17faacef153dac443332c75b4b614281daebbcd292a50d1eeced042392106b195a24250b3ba36b0f42b04fdc003dd252e64464fccde4bf71ff261ab33bcd1d8f508b25d0ceb33b9af45ac55915cc8e3bca2f7fcde556dcc1f525b1b2a047e88770be2146a893be3930abab24648019c3ce71cc328d5f38cea1129df552d3afbe0f9797e9522de4403f1bd3227ae46be8fad716be89cfe6d626956d85d8ca30771d5b8f089e428f8852e198b269914d5de9780fa8ceb889998746125aa05fa83d278330acbcfab824eed199ad1b1d11c4aed646d8c53a0314c981035f245fdaffc99f556bac2c8245f92a050a78c4e879c4145e56c0c32810c60989a5574839fc89845f005f85dac0b336002923222799b4f88ede94a731abca72f016435e10541af5e7bec34a5070debf189b2b6fd18ea18aefa19a8e5bb27c1904646a850506128b38bf8c08abace78c8a3d294e43cbf9c5dbbcb1c1c382c3b1727249f159bb303a1234745fb86a920f2f2664b979eab324cf17efd5613a736ac62fe8da84d0b4a52df2d70aaf346c1520b428bc0eb9ab8c6bdfb87cc8bf86a2010dddd874da5abaf72cf08c923470741ff09a54766b43ba9d2720d67a51cbca9e2a9939b7c804ebc6acc25f7371ca9b92f007eb13455b1060438812043d1d759d381acdfcdc27edf3992451554d5de7bb78980b0bad62881a8028d3225c9d0fbceb5a90996239c65555fe92156d3a20156c9b255fc0c4a3b0a3e87d513acca6a643b5965e85cfae9531a258f2733ddf7532effaf02e9c74677ef59a1642adbe788680038aac1e40b9c2df446da2a453257470651022bb2bc404a088740f9f6ba3abc831996bb696a4e0ea6e0606c58b0cbde38c8324a6ed0cb4d9716e95579622c136dfc2c40ee8200acb4ae4a3fab346c66dcb2d6b251991ebd7867c9e6a76c85c71463b6f34d15d2a92e417bd1a4bfb16ca5c144f09ca88dc83cd4e876a2226b04882ebe729650145cadf1fbb0d76ff02bab30d7639c11e43fbfb1e24946890f5d3b7a922ecf309c2616c623348f0a8182c86a6f7b33eac8d690b278be2bb7d8442d87218f8f190b8d2b86b854e35c2167c97ee72ea396f240e883b9ca35c7ac5bc43527753f5506d9e9092401c5643b150c76afd5c06776a7bb57dbbf4412e9982caeab9cdf1e0139b77e00f7cb2b8f14b787d4eb07ca77a86075523bc2e088cbcba5199a71a2c139a8b4927359f84d6ddefdb5e64456539982c09c079b5a1501c03e0ae2a8eabcfff39f23d4470315e31185e744efe99ca9916fd60bcff27a15b62d14fe65dd92df47333541ae4b3e1aac5022535008e1efc5676eb6e8cce4518241744792bff0d2c3c27e09699488b69b26d9f0bf87ce11b2c198325c396e7dd3f83b21b57c3f54e9b3f8a39b51cc9a1e26154af58c2b24f3a2be8e549fe85f0a160f1b2aa6b9d19fb4fa7fff2ac17e8b933b5d39628b19f5d0a274fec505b40346fe35ea0d6217381f9f638465c82a0cf98bd87c448d88fa2cdbfb5b99e5e7f5da382eb5faf9bbbd0f2cb93bfb9c6a49e784d31d87218f6cdd48d1f299e1381d4eab70515c2960c9b649f43c18a93a21c7b264d67be1490ebc605cddbe34a6d2c759afcf98717928a9f47affef8814b0c228d2291fd916a057c9febbcf6b151bbc47cb508b1690ef6c9a1b3e27398066b858c7bba5289a66882d2bfce907c234420c8cbd9e1787cf26d3c767b4ab1d1ab58be3175d0d88e9ac17f86c96a8f6b3c867c873bf3483c0fd014466c99f4b30aaab8dbbd439b8bbb399a00f2119e0fed41a625fc83559656e73634e050c8e204e06acc3b86ef5a6882a9ca16a2f49ac4a06d2ad4dbe390bf0817ae4eef0b0e5daa99b47ce4d22c91a68e6ec93c204a49e285a09186ba44e1d616a06dc1bad5264556c187ed0896e35cd58701440c9f16a7614ed28154c1524322b2d1401abb6047c4e07439d12e483807ebce8746e70483df1badc55cb5333bd26c019d4401c829c1a17453f2cd00369388ce987b5c25c5e07f02a599195a04e942a4be3239df0a74e95c733760641a75cfcc6f305268053c96a7cded04ff9fb86244956e6bfea2850e2113799486c2d6e217cb56b5b249734cdd35d00270c805efb8179b97b9a0d56b11068c5f29609d036e1de567844a8b380ebf1f548eb4e3bc53120286a6a41b7fbc0d3255b2f32578ecf9495996cb38a31b8249294312a21ca6f863bc55a7c5f71fba322deb4526bc4a921fc5f17872337d6c1be0437b92ee12bbae91de7343c5e470dacb509ef3b25c3627f8012d14f703d68b4cd823292cb5d2dc8b07679420a1db89930f133c904f1b53a675c6a5bd53183e605e385138067fb21b93647654ff72e2e18bfa601c91b55b052141001fc3cfcbda5342853d19c472f7b8f11bac56fdd72412e0c8300724860f9abbf28fd2c5036e375a60114cdd9e529454bc6ed8db055d94559f028ad1999f8e8548a60433de72d5eaa90662d84f6c054a7eafd58f00b3c2d67979575c2665de1c7a157328cb247f77062450fd00c64b693e81a08181cf231f31070083dace50982c88722939b8d10da4f71435b77acf6793b74ddcf1cfe2ad920d593d64eae848eff1f6ffce889a7549d9c6e55aeb833503fdeeb7061ce2551992cb6451c48e51d8ea1ccba70fabb157d5b73ca0e433881c7f5f868055538b27b3f15630075fe35b24dfb9e327d1ee1e4aede9b508235aa8d24f09a69d399a689b81f8f552ad1a1ecb36d589835f5db53532e70c1c9d0e49a6f310a552eb974f2453b135b1ca4a45ecfeaa108a0562fb73905ee97673c48d10c81adcff2ccea14715d0acb9f069a1619204bd616f219990cab4933b13e28805b64ac757316e65f53c28c8be7ebad387f9ea6853687118a35851d11fb24153ea898d9e9ae0eeb7589c5629a76e195643813049f413b87d9d05a318e8ff7411b10f44f02bc09c645ab95da904580537962815e2e177fa3939b70a02cffbeed54f2b578cc1e6a86aa16e017661906e6d12bd0e1b84d1c6117cb4ddeaf87899c194f75f2169f2d12a44df009637af7c3b27f198afc367f5a7ceac650285af15da6adf11d7de7d08aa68ecfdbfa680959e263e6ae9ea18cc887b47208ad3d5f0dff33c1190ea224310117b5aef1d49a1f55d8d8e6d7d8604c3f4f7304c4d196e6af7b8883d1f9d41f33a9ee4055f4d2971e039067b3b277df6b7c6c7ec301e76be90e484f6396bdf3e3b5625b9b47c23f24bc582152aa9c69b7fc9af2081bf8a573a75c10e8b3420a12fc7ee616bcba4d136bf8cebd5f540fff4262ab8ce0c1a783f1e869dde59a2bb086e9f42977e382a15e4edb7c61669a2c732f8c9be4ec6a51d2538d9a5c7e1739095ed6fd0ec76044867f67c0c48fcdcbbae6ec7b1cadef01da44edd3ea402dd12008fac4b80952233be3117f267a7c83e7a868b659f33337904f35892710a02f0fc115ffade9f17d16aad9a6243b6e2614e37e932db94937cdd4487cc3f326f43ef98e51925aedafccee3113cab8a18d75e1c3f2295562144e41dd3b108adb8c55b2737ac2064834aa1aba01f0dbb8ce11443fc28b9e5fbc0e9efa3a4c5901978a0bc2a995a3d41f5667e08559721147122523256b2c5caf56c6ad4f0b1e8eaff20ff50facbf57755e4965b13ee2fa4418eb154e53058b599419c7c1894969805c4d2d4a937ad8c1a43cbf7fd0fe34385bd01ca5679f64dd050bc34e9347c6edeeffbb73869125eaef78d9c3226d094cbe2670d122230608dd606816ceb00456911d81635cb2112714dfe42e0e7119fd2c51978abbf92563178be6cd89edc02819c238ad37ad6d96b9ee7d4d09caa43ca0b0ee15be9a3de3338e77f811abe684072b499899148a7408ae8d9599250bf1421ca915db2f733d25bf04d140dc5cee7d7e453ee9ed08e22dd93d14bb6a06c653a6dbce6b20adf625c897a2d27b81479eed3ea8cce480c3a2bc3c9cc714e1b50993b9ff08a2a307e0707582aa8a7328fdc117f8c08b8135883c9e85b0585edd22f7d3c6a5936fd2fde21a5f855e16a33358410a20ea238feafccc7a3969b4e5eddb102f32ff64e609f4a0553dc3e2e99bb76b6467a7c32035265d6deafcfec287e107d66b2c05cd4600618d062c7f06caa43d2d8c70377100ac1dc86bdeaf47b93ca962240335020f7dbcc9c93a22a0e7207a0e6d3d9b83b1f307473423193358a55d1c9aa1fe3fe94689dacc2003ad9a76aefcdc1edec4629b4f3c87de76a06bf4a66645881565b9f58177d5c7f62bfa3ce0621f2d53ae20363f2b4bbd604397e6349f321c259832636264255c9a168768a588b75d9dc3a0fe6ebcde41a1962b1d806c61151c4e97ea39008fed091faf98e44b5af65270f612833f3b4c18e80ac1b3414d229fcf766678ae0f8be5b490957195cdedc71aedb8e30a3b3e2d27e8731bcda87fa6312de43718d33a013ff1af84a5d2061ebb4de979f9c74e0bf40fbfdcd791c45719e7e276698c79abf1d27df0b496c3a26316acb1a070017197f2e0f3903218c9cb8ac76da712d45f0c94e6873cdcfdc5da3fcefd8dc8fd737d7004c6e2add11ba08f75419a8efa1108331318e4aebf8ceeb8c30aab47d56dc2d30b48d120e226bc24cbb11eec8c3508bded57031957af2a449d2390e9efc5227c91c79b5c44906b390604c8190be67906d0936b4c9fb2de87afb16b2fc9983ac7757d6322f540d05218f68068c4c5a9c174b51980ec8925fd257fd3259ade4b3c58aec07acd33772ffae3c41c973a95674fff9d2e5605cda9b47a33181652385a6c64ddb57be4ede2855bb686bd85cb14261be7b2294349ee6980fe2db5f00ad3aaaf8d48750dff2bc36c23843b7608b626b79c6213f9df56856726c2eb57cde8a54495480595a045310c36fe86a5a5f033ea137b55a7b4c75741a611c7b94ce7a516b93b41e3cecedf243b51abe70e35dc682e8a70f250c7ede32c978cbd98e93be98411b38dd3ee195110d8c7dc38671038d4415754266842931cfc9bd4ee45674f7c074f59bfa80167eccb0b8fac43f79f34d9f7c8425e414d38eb323f3e1e63ed2e0d4bdf9c25108a7d8c337633b175725a8101baa26ca2547e5ede65319e68dbfba29651421a7f9d559a1cc6d8881cbbcdedce7c53ad6e262e827cdbd27b9cee31ba54ee37310b19a08fb22cd9a1fff41b3a533e85eb514239f72753b0e895937cfccf77da33286a10eb36d49fa3b7f509839ae50312ae03a7709c2381c9696705bf02e37045ce3377b2a79fe763593b1183101f8358293c47752bae8d180b0193932187d498fe6f15e01207abfb6b4be8bf5afc31b848d9eb895c9ff6ce11b4f9f2e18ada333e566fa5437d8f16d9f08047b317a47fa0bac111495fce195aa16aed0b22deeed5eaa6f15ba768d5cca42c79cc29988da68e2fea3f8900b009d94c06f49757b79fdcdc33fc3b735137489bee9a3a98602fbbd153f9f64a3ef946923da8bddf6d1dc0400b93e7221ff66bf45251c196e03e0f8645603e42694fb817127e39b65ab1363f3a68f6e1a20f073bd16c3276e7e276486a28edf34f1e6317117a24919de2d1aafdbdd115259eae146886f47400b3fb90aaca8210f8517870d7b61215fef573203faa328ad1c807965bc4d08c24c0014c8d04e0f954c737f18c67fd0208b3dfc205faf7c3b433f2b3bcd66b763e18fc9dcad11dda55aaf9935ecd5a27f5256c5e26ff64561c85ae170decc0e05f9b64195afc1165355a6f3885dd545cd58cd7b847b7ee4f01036d1cc094bfea36307cfb6daba88f0eeb86e06d5d9af778b2e1dfdad14ebedc193763bdf9455f449acc7468f09524ae3bbb5a4f7b6d29b2b13f94992f325d5b76ce87e991cf2521013abddcdf812c8a6e737343ac116997472bdb91d50d82390984910edac197f8a8ea227279a71545903e1587b10957867160037ce15b9e69c179e519cb1c9033f2612f8962ef707e009951aabac90ef39d0996ac71a30b2db31f653e530ac0832524f69d1a7dae26c0fac1ea4afb01973d6091ffbade81f848e37144cbede8534aecd7ea58aae05847b0ef8334b19f9ea928e8d49f70c0924bb47c2e44d16cd6f9cddcfa4a812ebf848b6d19f05c06af931217c0f9e474bf706cf248a560ac8511d34ce4f644075b0397013e486957e9a5455d0e7456a3fb59d4463a698f5240519d6a3b7ac81ccf91132a4448d3789d9b0971b7e680acfe9fbb020d671fedc96c7251def8fd4bb7fce1bc920c70bdfb0ca72b19844857f92e9aed3f6c449f102676151a1ad5be8c13558b86a6317837d4841d1fadedf84c8d2c2cb0c14969864242b3fc722b9998af54b78dd6ab8aadf4326cc370850e67eaf5eca36c50a94d03234ff7ebb30d5be5cb31e4770a6472ba655e5f93fb20be2efccc2e1cc0e2e40e86cbbaecad2ea05b60f5eb685d8bcb24f4ea94bc6ed07e075b187577a8b1539a39d3b356b069110abc8b334059d0614a190c872dd552f7c71ae631e97c81c6b1e09f1ba1f3383cf661f95a46a7696065d4d847dbb9f83a4db653d7a9bea770e643102e2b4eab4ef4ed331395918477acafc46aa0d0e4a27ea820160529331302b4646ec84cb5066dd741e061c3f579a125ba08cc48ff4f2518a15051f6a6ed770814d6c1135642800e084ad964bd51f10551e668d9b2d7c3761284cb0576120348ec0eb5d29c3408e77ba71deafb1bc6d6dce32ecf870f67373d495cfccc8be8b10f4b459d0f7cda5d3898b4d6e8f078deb524046ded16e077d90ca50f020c5cddd7d806a841b0fc44837d37744753441103ac158b17f0194179c108f8917d2c547e4d832cecd1185806d23e869c4e5c30e6445662dd1d3070fbdf3e01ddf58540b62604dbfc12f18804312deb13bf2742df59fa22eb812067a6c4472ffab34d3cbe31f2bb1140ea3d3a8888485c5098ce17b09eebe0f703711b77e501677d4488aa0febce90692debc110730bd8c62619755e523c0b26736020e6400e49074ded09b04dd3a403e62656e9b9a9df4c33d516892c650fb017c64972da2ca40eef5c41cbaf85a943ebeebb5a5744a3111c75ffd28e61d13bef0bf5e3c70ab4678d18b4d4e17a8783f023ca49ba1af8d93313cb93939c963d17c89ca5dd53e60e678df9d0fac2fa016b6bfe7f3d1e46d6917afd85c5fff5cedc28f445c6a1fb8996f80e75d8ae23c644d1ce506c93a685b09818eed29193d6c604fb7323e7d39f71ab28d1f864bec3e8625472e9a373985be4a04922259a2b0ebdb621f10fcf2245f2fdcb0728c247e215530e22d2fa1ea838d17a9fc23a199c03b2b130399bf78a6c826e6008fceab38ea45cd0b563b197510fd7e43ec55783141dab8df4d289a6c63516518b7902876cba668ea96fafdb2535e569460ef1b93afe00a86119c690430341d7d8b3039d4adade035ea451bdb4c7e29c932727eb0b05c1848a58a6c581e3c81e44683f1230eb57a6bd83558c4821811de1c9ad9c92741b4061076fe147ea8ca7eadf174c1f13760a9aa4d814b87462a9ac9abd787eefc985b430491f7d89b3586133fdb658d01230c1bcc26072dc3d455fbe8bfd821a2b4d391e8e37bfe45d8be20e6e33ff9daf490bd84b7e27d02c3fe67a9e3bc16efa82ebb0d07633bca7f263d5966f923aee9639631433499f12561e19dc885bd65c71984f2773268554a78b935271a3d6f138cd88f82870b1d8d13e252d5bae6ee35daeabe9f24d7814b3e150b7df88454a97a1b3f9cc862030383d0c996a2e310195895dbdeb995727a17b86f92ff3c2864905b2b294a7f3a22cb8cfb774b8c1bfdf6adce9d968c3b2b02cfd5513ad1c78cc5c517ebf3bdf36052a6adc9f33172b66f0c4d04396f86f55c1e4b0d4f37c2dc520ae3b44f7d117f1b69af6dd9591eda3afa99435558423e752f085ac33d9470e29c54dbf1f501814299c2308ac3b981ce40800940000020000fa22202536cfa57b032f193fd978f7caee39e7e6093941ac18c8c2414a73b882a6e732b2bf64d7019091c3f90d42bf77c17ae55dad57ac42efae38ffc08b1558e63b6159576d16f9d90c6dfaa45042aa3d8f020d8fb0215786d14706cd92979b394d0c5f7596aa375a66c3f9ecc9512759fa85efafbe3d53060046007d0000000000a3834519159275431c733ae83fa8f1768481693059a96d9fe5f845f55131c17e2cf248599aa5d5d69fa0f6787b62b564b39eead2f3258fdee63e7f4839a8efa5ba3740b873954b47006748fc3720b70f79db90b1f55dd266cf8bcea2e76f5c7d69af54f304e255a03ab692fc97659f817b7f4222e30c354db4f4998c8ffb62da396c454a46af15a8082df84ddaa17688f75f65f903c7604912e2bfd42611e4dae5e90b907607c34c54246cea7f05d67f05e3e0c782f97c0e3c70bfa4e8a03af4a99559f51d5f04b157eb21757c8290b72d3dcefdaaa34337a1bd398a398afe0fe47bf1af844071be7bf7428bdba84672d70e4a851a440623b71b2d7b11bb827c2e06c6d2d2dec049dd24add0f0e793cf56fe31b3fd7341202c0ec1b3fcf389412e6409af7bf04a2198b17e65268a6ece189720795b2f2e32938b394da01ddd3c5de292ad593c2a41917be672ea6561bf5c2ff0027753ff2831d9cf0bafe84db5648c89ad2ac1ba23e58fc6aed9ec9ac65908e36b1f6ad31a707e4c8b6ced2784314f72be50a92ce388f9ec6aa381b2fdd01601d737e95ebf3c3d837d71c2f3660da4933e4011f02597d1020fec3b3b81fded95472893ecec972f39b4a837d2b82fb4abac9cc73e8e60df72131ce3c25a1ae065fe70208f1ef13164193f6bbc779e377610a9c36c0678ec31f20ce07231c2a4e0c8b114d134b8893901029c232cd08465f7c80af33f2377a642d3f7f6e4d68673ddccacea2d438274f07a2d7695dce5ae520b83448827faa0594e364195a0a3fbb3e7d6570e1b857bd08d7f85f4bdc7555dcd2ec0d63989484e4489f9725f5ac438a01a22267eb092fcc7948e0442a2490694ed961b9b6bc20eb4a05fd236cebde35798619f1c2b8418e09b6bc6b8a2627d11f54073ba67f7c8ed2151da231c2166e3df8712220741251393266d3511ce756c83315f268439ba9d29d26d429e55889c1278bfb16674e97f48b9a43051e19a2a7e3326a32a2cd11948b84d3871d68fb8d214f382f96c020e7fbdfcc65f2aabad86c8984cea7f3ebab6f3b4d7033079d70a0d7ee837c05803f0ba571acd3457d0746126582473b907d81c290fb04ce8f0441830afe21c8fe30eeca079307b903cd05d421965f7f1730ae4a3d2abe359f64fbae5456184dae34d45251192537ff45894d3055d105679d4f25c02084d6fa2d45277f266055909c7062879262c97166163004b2c8082e35a64e40273564679d50ec3295d1fbf023de18d37407d39d3a1b9f9519a90aba24f6a845ed91cbdad4028d4fef4b597e5cb5eaebdb5c97ba30e21188e087a2c8a7452839c251346c86bab6238f590e9a3ebde36facc4c804a56365e4e77144ed6190f13ad14bd0104fd99a4a5f0b698be40cce99daa302638e5b59ded6f641083c17c8e12c83662950c4504d5cf67f001ae1d01586a42718ac72fa450eb47ac943e71b845b0155deabc61f95592d91bf0d9914bddbb5de8b02ed3780f22f53872a6680681de2eecb1ccef4f737d7e375c308282db48bb8d1c625533d2775390bb567e07caf25a0494c68c4c5c3f5f13f39c00c2e168001679951375ef98a8d851ffabddaeed03f943008ea782bf1dfaaf59ef40c9b1c661cabd5d35bdcab66df543d3823032f4640f2bb0d47fcc6a1d2a2743284bb336e9ec6d17615e4742f921df3ebe0982ee6995c535a0c9200441c018799525e52ba8335f8747cefb04448902be1404b8afa318abf65289d38ff5e942e0c8b51091cef64570530b9cb8a4ba0f1bf005be101406c0f8d7a42f9477a3aa2eb1a0e13da2e5c66c6b880f8a051ad31b5fa0aef3de840387e10ac5d4c7f54de3a20a274b3fdb1ee204248263f263a927c9bdb34a15bac52256727b2404b730a22f66ab8adc7279643b3af2bc39ed4fe45a860bc293972ae13e6b92cf578176ad99d5fe492a79f6ece571cff966ec10c60f732d50f05b92c5c3570b278be63da0250d2a7e40c9a143a70c7ab0910594fdc2ecac0abcb185a3a39742a59aba3b69e51483b1e8bda3feb6328f23e4f21c8345319923d8be3fe509c763a04cc12707b8e5361904caf9c580cd49a2e89c24fc7c087c2ba57e4223b1a4edba06826b8ff55482f18245d2a547ed197e324454c63ea1d1cd3e0f1f1a6f48c0339e7018bed9a5cf39b42228d986e01e5b1eecf62dcad7b328060e9128a46118f82df1f80a162bec2f3d35bb61d6581f13abe0046190b6c729503c74c288f4da1a22333092c474edda82fb70620fc5d68ba7c534bfb4f79d0e1fe9b87d3a0aa1e3bde70a513dc5c87d4d5bc7ce3229b33f6396f32ef34aea5b34e6daef42774aebe9407e5ba3cbd016001f2e0ad4e64d449a324f4421043b172f0db8f1b6258ab10dc18817d90aa839271f06b8751aebd260f0384333d76f8846ae4af05bf592a31781f2df64ad31af9d6ed2b4d4a1703cf24c6d04b6a5e82f5d0559a04840eb4352418b65c62dcfdef662dc78e17c5b5ab04a56edc02749e700aef5a724145837a959877c12f1d7bbbaab268078b68aba547eaed7c75b9438cf7958c8a2a6e4601c37658b53b0035c5c6696d8f7a0655d8130af0c0ecedb8f48e92b0deaaae814fdedc1cc16a048962095adc8cd24ad7ed5314f2098838502e043f348063e594e2f51f3e65f96353ff3e65523064995a7fd91036af2ecb8a70150e2a8d9f8fe7a34b17996391a952a3752c9df13c4da3d4f926848195615e6d0c542847d500a52fccbd47faacd8f1889a872f42ba9e1c39f5da6e29de5cd3bd15101452408ea4254d79ed21932219a013d9a2f612beff88f2747025392fe220a2f33950ce0c9fc2230ec9312e12329f8fe4801acc2f17c49e63f4d5273378c8f7b057f0f2322f615ecb33b0244d931a4a4acabdab4383c29c6ddcdadab15b079f9913047dc57d67b7c8566bcfd759903c83ed895eb49ccfc4134e194cfdca8da9e89477de45a6ce0ecbfa46191bf5dd41b8e73fb04281a5951b4ff6de86e87a53fb01d108d584ceeeef028c667bd3925081c7a282599783b257fbebd12be3b4e840ffa851f42c298f69b1996de1cf6dcbdb1b800f90ca95b3912094d0044e566ac1551d4eedefc7180252dbc073198e24128514a53dbb217308a887747dbae014126acffcc8d9eabaaaee4a765621a979820336ed7474dd94705911c048e5580dc2cdda6ab16d8390e83eacd24a8ff42393a087b5a24642e72740d974ef85237b1efff263674fe3ed1fd1958faad5eac96337a9afaf583e64e2fe71371cc1fe0ee9408a16c574fbd1ca5427bde5bb21f4bae65d1b8184a22e9813c0ba52cd29f5d688619812f9c0e88a6fa0e64aed20bb6166ac3d83f0bb636da80cbaa78bf0ccac2b388533bd174e0cec6f145a42932ccbf29d39b48adca9dc5b8845ba08db27dd1be200d85b5afa0b1d26fc16f1aa2e45d069aea7cc4f24702a9e7716e64df08cb9b62e90e09971c0529aa9597647b1475e276816cb42ec0a1beb0420912dbd5892f8fa4a20b040b16e91fac87ce9556652cf694738b30ae14a0d1600c646a7940fa2c6d527cff52dd3eacb22ec6a84abb40a181e8666ba2569c41e20b79c584beb75986ac202f02f11fda266681faa9a61ba807fa145be5b49bfe25367eb0addb5882853d4a5a84204819340bce5c7a1ef5339065e776041ef9d4790165e153e1ba469bb43b7a0f7c931d2fcf25d0e75e14490afd78824ed6f96e46f03d4d1036258de5cf54f76a72ddc4a5dc1c64b9769c67c08f659851ae7b7206f61d22c4fc07052b72c3294f0381b6f9f4a455f15567aa6ad982f6e48246a24b6949b92b2cdaebf5575cb1b2ec643aa6cf437f6e7cc69f8b04675b4c1b7311181c3da32c318570cece5ba21fe967266e7c2e1bf84fb254291cdd3183cad4fcdde8d653a450ea4b38560c81cbc7aa7fed57e9211b3241f33817aeb5125c2a3ff0989572be9c902f807e59e791cf13a3727bedbaedd5080b3439c351ba8b6867b6d567c32056a5e836a6a5be0aca5b006040cd16d0e14a2fcad216915f163d4da88a8caa8957c5a04a699ef6faefec1d7d78439e1c5b5d146a00e2adef1c13e1158106d7c0e7844bbe093c4a80672ef41ba59dd3818bd1208368b5a32751854f91c5bc0bf8c11808bf0f4d813d94295acdb91569d129cebf1d7595acab8c0f27e2cb9301be786ee8da06e80a9dde91ab501e7400cf96efb32b000d938c32b80eb366db0d42210419db5d784829130db9b6424f0a63550521b87c98f868d76dc2c6fb2fabecb770bfdadfcc7ee35639956cf88abbb0abebd5c8fd49538474ae1ced5237f1ecb7952a0242afcaba3b07c0d75513a9e7a113129c34ad1a88508056ac8556c3441c65acad403dcf68a4aa15ef856abe294d4c395cc1d654d2aa9bbc0dc4aa4757ca0db78246d2686f9ec3ef7b6e33d766caf94689b0d5404c9630cf28f63ec75cd3b4e4c08b30e59f0ef73a48977caf7ddc908c46d26421fe1b65542b9a554aafd90e565dcdc23ac3706bb95b5f22372aedf4a96ea78652a03669a35b329a684b8b706a7458efa4283ea93ff6089c7b5fd3c279e6538936e0974dd79c8e6b8537f523d58280f8780569f75debd0ca9484df89c5a941f5caf6a58514afd36513066a5a31937ca5e8fcea8d66b76b5120015461db995cd6b0002af985ffb5b2b6e78b97e02c24aefc3fe8af55eb30d2a56eb257212e699dfbe62e4d20dd15f93fdb6d11e2e0f7d7cc03f076eed2dba04f12f6718ec98b71c19a3ca088fec5d80f0f139885906842a11b7d2a8913f6e6c67998be46ce30fbe4c59adeb38811e1f174f6f979c5e39767106039a34a15b12b9d65dee91d84dcea700876ad0fb05b9d0523c4c633ec906eec5a1cc595f8b1262cf909d829745f225101bd1344e80aab8fef8e3e130c9d80418d54e61c9fd1b7c4a8a0db6a5706dfc03c20bec0fce05d62e41f8082229d0a9e0f8b697d3961ed100915a73e38231fc98ab98822a7dbc3559ce849d4f6c2335e20ff52cdc53d363dd52a78a6282951740c1170324b6c0f99703c3ce18166738f92d549a374b6814cd63ec2e13ab83a2ff7f762bcc73e14c772cc327ea7b2c70ef3e703622c1f5c95e08fca5e79f03fa470b33dea01878d0683b64b6e95095418d3d20c81898089bbfbe96082d9bcc716ca9917db4ae8d37e0fc3c0887efbb51fcc5ab6099bbac992870896ad73fd1fb790b6e628a1d8f64802118c295b54448f1b1e65327a6e84ea525c2087094063198716298a3f4008f13ab18c1efbddcfc114f1398177c07076883618efe84dea17725c7cdd5a672e8a798d60669b3ca5edb87668563dac5e39f3706553e7449c260364b603d38411c71e5f73750172e78f354414e744de06b14a4556f05b48636ac8c45b85682e89c1ad409ed196cd52901d4b0779cec6cce25bea228f6bb7460bdc6a71d80ff9ee7770acc143d9b2bda32655e232865bc3f4513775747471a96c940797d7c74026c7f01122470461ec2932d76aa93b2289e1685e4fa744450a7e1158d1c2333f671452db158530d5fcafc61f8548adf05686d530f12a2679e1e36dec37cb02db9636a46ae98d8440000f2e7f89c2c9f0ebedb991da189b1dee812fa41c2a0b8a7e9883d8ec89caab5ce144102a1f7106baa0af8080bc19e0a269a0c7794a626834677001fcfb87505d4b5115a6928f8604936962aae54385adad63658619b1dab281fdb9a452e45630f642c9f9afb4f9b10ad0f789e7d424c3e84c4888fcf1f06df5408859638edc8af0beafe0f3326188aaf6d7758e8eb0dc0c04592b29b101dc6c452d7555569645e7ab398c17eaf967f87c485dae77890e4ab15fdc9a0c6c37a8d0ca6ce6d45c15fd7dfbf268b84b7055d6f93aa209b5154abbfa1ea440d00db8d59c545bfc4679b58c3e5315bc503e6b05f3a728db4c87c2b8c95208af98dced88d5cb704e64ea5e7076c66ec8627dc4e471c36c6a8a4957f76fa304ff7021f035c1533c25a5ab94467981e45ac64591c2267b5bec75074484c9647008feb8cf006ec456d114052bfabc7006af6ff9a708ee02373e486a85ce07a5f68c05398814c8ccc802018836c505dd1e41ae924770b80d6c5439efbdeaebbb5c1685c4a4e5d7d985caffbd6266f52c587841b079f3fc4d3a8c3b6185a96cbfc2ef45327d63"], 0x429c}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) lseek(r7, 0x0, 0x0) io_uring_enter(r0, 0x20002a71, 0x1274, 0x0, 0x0, 0xffffffffffffff22) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe4, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe5, 0x0, 0x0, 0x0, 0x0) [ 904.582138][ C0] sd 0:0:1:0: tag#665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.591914][ C0] sd 0:0:1:0: tag#665 CDB: opcode=0xe5 (vendor) [ 904.598185][ C0] sd 0:0:1:0: tag#665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 904.607126][ C0] sd 0:0:1:0: tag#665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 904.616066][ C0] sd 0:0:1:0: tag#665 CDB[20]: ba 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe3, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x12030000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:48 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe4, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe6, 0x0, 0x0, 0x0, 0x0) 01:59:48 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x40000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:48 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe7, 0x0, 0x0, 0x0, 0x0) [ 904.807786][ C0] sd 0:0:1:0: tag#666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 904.817541][ C0] sd 0:0:1:0: tag#666 CDB: opcode=0xe5 (vendor) [ 904.823782][ C0] sd 0:0:1:0: tag#666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 904.832763][ C0] sd 0:0:1:0: tag#666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 904.841716][ C0] sd 0:0:1:0: tag#666 CDB[20]: ba 01:59:49 executing program 0: remap_file_pages(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000002, 0x0, 0x80000) r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r6, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x42000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe5, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe8, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r3, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x5ae0, &(0x7f0000000180)={0x0, 0x9f60, 0x2, 0x3, 0x3e3, 0x0, r0}, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x800}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x2, 0x0, 0x4000000040000, 0x0, 0xa, 0x0, {0x0, r8}}, 0xfffffffd) syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x7, 0x8, 0x0, 0x7, 0x3, 0x0, {0x0, r8}}, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/12, 0xc}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/209, 0xc1}, 0x0, 0x40000121, 0x0, {0x3}}, 0x0) clone(0x4516000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() tkill(r9, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) [ 905.463297][ C1] sd 0:0:1:0: tag#667 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 905.463838][T18135] mmap: syz-executor.0 (18135) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 905.473058][ C1] sd 0:0:1:0: tag#667 CDB: opcode=0xe5 (vendor) [ 905.491609][ C1] sd 0:0:1:0: tag#667 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 905.500554][ C1] sd 0:0:1:0: tag#667 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x572b0000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) wait4(r4, &(0x7f0000000140), 0x2, &(0x7f0000000180)) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0x7, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe9, 0x0, 0x0, 0x0, 0x0) [ 905.509496][ C1] sd 0:0:1:0: tag#667 CDB[20]: ba 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe6, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0xac25, 0x0, 0x1000000, 0x133}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r3, 0x0, 0x0) io_uring_enter(r3, 0x6b41, 0x91b9, 0x3, &(0x7f0000000180)={[0x4]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x8e1480, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x1ff}, 0x0) r6 = getpid() execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='\'&}\x00', &(0x7f0000000440)='#/\x00', &(0x7f0000000480)='%\x00', &(0x7f00000004c0)='{&\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='!\x00']) sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) setrlimit(0x9, &(0x7f00000001c0)={0xffff, 0xcc}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xea, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xff600000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe7, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r7, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r10, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x400000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe8, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xeb, 0x0, 0x0, 0x0, 0x0) [ 905.677902][ C0] sd 0:0:1:0: tag#681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 905.687693][ C0] sd 0:0:1:0: tag#681 CDB: opcode=0xe5 (vendor) [ 905.693953][ C0] sd 0:0:1:0: tag#681 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 905.702913][ C0] sd 0:0:1:0: tag#681 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 905.711879][ C0] sd 0:0:1:0: tag#681 CDB[20]: ba 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xe9, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x6000, @fd=r4, 0x7, &(0x7f0000000180)="b25d1ebdaa999b9ebee5b973535c56c0cd3b8b0e3a9c30b17d6f4cde347ed6a51794efa7d5f16c2d313bbbbe409649e123652de829979e1d395f545dd1152102f03b93ca9d2812728be96e7efe3aaba8e9136e2f08a56d5f4d1273a8be5947764bdda24e274a3ebbeffffc2bc0fd60ec3eaf71b473d949264f1be2e294f8fc", 0x7f, 0x8}, 0x13) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/113, 0x71) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x60ffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:49 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x386}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xec, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xea, 0x0, 0x0, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0xf651, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2, 0x26b}, &(0x7f0000004000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x340f, &(0x7f0000000180)={0x0, 0xe9b7, 0x4, 0x1, 0x18}, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000c35000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r6, 0xffffffffffffffff}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x8, 0x100, 0x12345, {0x0, r7}}, 0x1f) r8 = gettid() tkill(r8, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x8) 01:59:49 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x970000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:49 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xeb, 0x0, 0x0, 0x0, 0x0) [ 905.900165][ C1] sd 0:0:1:0: tag#687 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 905.909957][ C1] sd 0:0:1:0: tag#687 CDB: opcode=0xe5 (vendor) [ 905.916218][ C1] sd 0:0:1:0: tag#687 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 905.925188][ C1] sd 0:0:1:0: tag#687 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 905.934143][ C1] sd 0:0:1:0: tag#687 CDB[20]: ba 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xec, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xed, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x10400000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) syz_io_uring_setup(0x74dd, &(0x7f0000000180)={0x0, 0x366f, 0x4, 0x2, 0xb1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000340)=0x0) r6 = syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r9, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x4) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x95b6cda08c467cc1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x1, 0x0, {0x0, 0x0, r10}}, 0x8001) r11 = getpid() sched_setattr(r11, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x100000004]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 906.080502][ C1] sd 0:0:1:0: tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 906.090315][ C1] sd 0:0:1:0: tag#688 CDB: opcode=0xe5 (vendor) [ 906.096589][ C1] sd 0:0:1:0: tag#688 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 906.105543][ C1] sd 0:0:1:0: tag#688 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 906.114510][ C1] sd 0:0:1:0: tag#688 CDB[20]: ba 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xed, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x7c93, &(0x7f0000000180)={0x0, 0x7647, 0x8, 0x1, 0x400019a, 0x0, r3}, &(0x7f0000004000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000340)) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r5, 0x2c3, 0x8f42, 0x0, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000600)={0x38, 0x2, 0x0, 0x1000, 0xf7, 0x7, 0x3a, 0xfffffffffffffffc, 0x80, 0x9}, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x7446, &(0x7f0000000380)={0x0, 0x93b6, 0xa8928cc404b69323, 0x2, 0x22, 0x0, r0}, &(0x7f0000003000/0x1000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) gettid() syz_io_uring_submit(0x0, r8, &(0x7f0000000640)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0xf, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xee, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x10540000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xee, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 5: r0 = syz_io_uring_setup(0x649f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000656000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) syz_io_uring_setup(0x16de, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r5, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0xf, @fd, 0x7, &(0x7f00000001c0)=""/112, 0x70, 0x0, 0xe885037b9ec0a802}, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() tkill(r9, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xef, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000180)=""/57, 0x39}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) r6 = syz_io_uring_complete(r1) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x100, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x9, 0x7, 0x201, 0x70bd25, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044084}, 0x804) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x80000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xef, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf0, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x4117, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xc04a0100000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf0, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf1, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r5, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x19e3, &(0x7f0000000180)={0x0, 0x357b, 0x2, 0x2, 0x3b6, 0x0, r0}, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000380)="ebf7c14ca4d0ad39ee8fe90df117bc299ae1c8607ad1deb13891a6bd8d09788670b5ceda6bbb287d19c21603197259d34a8944193cee38221126508a0e087c39009e72125e599a7a1329fea298d77697de30b104e4f6cb14016435c3a8852f8e65d0fa1fe12cf59b31f35d6eb842", 0x6e, 0x20000000, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000080)=0x7, 0x0, 0x4) r8 = gettid() tkill(r8, 0x34) r9 = getpid() prlimit64(r9, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000480)={0x600, 0x51, 0x6}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3f) sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf1, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf2, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x34) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) ptrace$cont(0x18, r5, 0x4, 0x9) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf2, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xd04f0000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf3, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x8, 0x4010, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000c80)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r0, 0x4, 0xffffffffffffff01, 0x6, 0x12, 0x1, {0x0, r4}}, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000cc0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x4, 0x4, 0x0, 0x3, 0x3, 0x1, {0x0, r4}}, 0x5) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000080)=""/18, 0x12}], 0x4, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/16, 0x10}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/186, 0xba}], 0x5, &(0x7f0000000940)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/197, 0xc5}], 0x1, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x3, 0x2, &(0x7f0000000c00)={r8, r9+60000000}) sched_setattr(r10, &(0x7f0000000c40)={0x38, 0x3, 0x218510bdbe38117c, 0xfffffffd, 0x1f, 0x4, 0xf227, 0x10000, 0x9, 0x6}, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf3, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0xf04a0000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf4, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() tkill(r5, 0x34) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r6, 0x0, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006dc0)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000006ec0)=0xe8) fstat(r4, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="e46ce8d559ccd3514d32bc5175e1a01059534e48316cf47114c01108bd8193021d49b3784a09f9b304429293c251d3948624d8bf56fe906af133753f5111e2c6f46f34a1554478325039e79f45c9ab98e2fc6f805654723478c9a091", 0x5c}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r4, r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x150, 0x600440d4}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="93e7b0f6948d9eb62cce5fbf90fed93131ee7ef98b026d0faf87f7b400050099165e2ca48b679da91c9169e5c6fee85d126b7d5a3961c311c5c132d2110d49aa6f802fee3e2b040fc54f52675587c2f3585964df01265ddd2c2a1e719557ff986d22c82014a4731276d709f8bc", 0x6d}, {&(0x7f0000001700)="aa93e94edf64a8c86575d44d47e9fab8832300d197027d73b594423f80b20899d852130511c45bd4e524b0f62fef3ec830861e32722263b57aa7d960f18cb41725e7e90fefe41f2d005962f8578bd5b0dfc9eabfb249deba1e7a5e6d10062ece7d7487807b1e65357dc6fce2e5c1d4a0116d313f09d11f0fd4813d31225572e424cfa22c34dedb146a155c", 0x8b}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="eda2c31a3171a48b6bf63845", 0xc}], 0x5, &(0x7f0000002b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xc0, 0x20000800}}, {{&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002cc0)="63a0c6a25a21932902bb333c7e53f89033d5b7c53e89f80686c9ea2e730dc3db62d623df309fb46d5f54c562eb0237f1a632ff524638fd16", 0x38}, {&(0x7f0000002d00)="674c1e22540706fc7210bb213b2a670552b9a2dc2225dd1553e24ca11f816e703a2e718c0150364dcec47ed07c8a6a2d8de48e7671a71cd79434fbb0bb7aabb16e48d52c441d9c3c53e00c4829adf42d1a27d3b376393f1578cfb75f98464ee55dfffdc04baff041625b816899c767e3623633ee002922c4e73780ac3c824cd0d8c36a3cbcd09f09d0ff7bd412f83971d5ac135264169ace65605747ff76ae6208597a961e4b6a796ea9e62d8ab8e0d3d85b5d53f5b4efa54140662a4e4870fa3134c8d90f47ac19f456235e3d4c5e970187e9abbf2096aa6049ec07222fb625", 0xe0}], 0x2, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0xd8, 0x20004000}}, {{&(0x7f0000003280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000003300)="fa55469a0565aa9960dba9909c1464079697975eab17385c7e797441d42a48ca8f3333db24fc0f1d0a39b4d16d218763b52f32b6de6ace5336e68e3f8c8d484eb86937aa", 0x44}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="8d82381da13adb689ca33ca5f076c3b547d94320d47968e38f891a50e32fb723c9f8dd2b6827e36894bfa95255ecd217af5635f39dbccf1c26767c94b0210309c7ff8c241ad3b5ce10a0be0e5abe9445e665e6ac2f46d0e81c9ee2f955fcbe7e4a8ad32e5652b9bcf71f0dd582e237edfb5cdacce39914c01bf086947b17b33f746cf8e42877c0976398ec0620741a53ed821061878ee9aa32a28a698b00aeb2e62c6d9572072cd3", 0xa8}, {&(0x7f0000004440)="ab3bac083c25d057902013c2322b38b496e86baf2f6f83b4d16009eb85268000dcc899b0b3e10c06e9726666c21087bc3777e2ef4dcf2c5b267a371cf9128a9b6f637130308b0ab81dd5797c844aa70691d995fd579f7605c7e9f8247ecfef934bad20b59c1641b95a24d2ccfc376a23c3030f6e55b0fc5c22c640c91a36b06ef90156158a8ea51d1924474f0200e207756a9e9da2da9fcb8577a7c116bab1695cc99b0418c2a560c7a4be4fd6c02bb06f1683d7bec67da14eb55f0bccc53a37", 0xc0}, {&(0x7f0000004500)="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", 0x1000}], 0x5, &(0x7f0000005700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xc0, 0x40}}, {{&(0x7f00000057c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006900)=[{&(0x7f0000005840)="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", 0x1000}, {&(0x7f0000006840)="4b625981c181fd3c81c0c3c95ecab782e863f95ca1627b7e1fc6352302c8e8ef1944834cdb5f9d03c40cfa3764c68012982fc573bc975d6a14ce4f276271f5c87c3747be2a2dd8238eff4c0f627694a6f747e6920355717482e4a012860327b8a633fec6165513c2b4696781d9c044df", 0x70}, {&(0x7f00000068c0)="610f15926a7eb1694a81b32fe65fe66c05e6", 0x12}], 0x3, &(0x7f0000006a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}], 0x148, 0x4938e68d6c9683ad}}, {{&(0x7f0000006b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006d80)=[{&(0x7f0000006c00)="c9e17ca93b0584d5dacedcee82c65e0919923c38f2b76d1dc6fb567189e3f404b536481f888f442ac5929e22046a90b63874ca1f0392b2b551e84637027503204d26476ae7729cafa6a3b0252b2c0a08455beeaaf1e51d5f8a874657112c6b452d279a30a73387fd196aade7707d483a469a65ebfa14eb91f138ff5cf877e5dfa527b9e986e3f7d3f74578066ecab81f9e9d9a2b7c5ecf3e7aa907fa4654b96bf0c2bf5991327cebc8657d34c6557c5e6dba43db99c18f6fc32a843fc2ad3d515f348ada", 0xc4}, {&(0x7f0000006d00)="f9dff6d3bf475bc66b51c4601f", 0xd}, {&(0x7f0000006d40)="48640e97cdfcd0573a0bd158f7631b43ccbefd7406fb0e63d740410fd11400a659090d413008b3615658cd984d", 0x2d}], 0x3, &(0x7f0000006f80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000e00001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}], 0x6, 0x24008050) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf4, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf5, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000015c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) preadv(r3, &(0x7f0000001440)=[{&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0xc86, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) syz_io_uring_setup(0x1850, &(0x7f0000001480)={0x0, 0x4e56, 0x1, 0x0, 0x1ab, 0x0, r0}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000001500), &(0x7f0000001540)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001580)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd_index=0x2, 0x7, 0x7, 0x6, 0x1, 0x0, {0x3}}, 0x5) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001600)=0x0) prlimit64(r8, 0x4, &(0x7f0000001640)={0x6, 0x100000000}, &(0x7f0000001680)) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:50 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf5, 0x0, 0x0, 0x0, 0x0) 01:59:50 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x100000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) [ 906.993847][T18489] ================================================================== [ 907.003329][T18489] BUG: KCSAN: data-race in compact_zone / compact_zone [ 907.010183][T18489] [ 907.012500][T18489] write to 0xffff88823fffad90 of 8 bytes by task 18493 on cpu 1: [ 907.020213][T18489] compact_zone+0x1449/0x1ce0 [ 907.024892][T18489] try_to_compact_pages+0x317/0x840 [ 907.030086][T18489] __alloc_pages_direct_compact+0x61/0x330 [ 907.035893][T18489] __alloc_pages_slowpath+0x2aa/0xbf0 [ 907.041263][T18489] __alloc_pages+0x25b/0x320 [ 907.045839][T18489] alloc_pages+0x382/0x3d0 [ 907.050241][T18489] __get_free_pages+0x8/0x30 [ 907.054978][T18489] io_uring_create+0x944/0x1980 [ 907.059826][T18489] __x64_sys_io_uring_setup+0xf3/0x130 [ 907.065273][T18489] do_syscall_64+0x44/0xa0 [ 907.069699][T18489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 907.075591][T18489] [ 907.077900][T18489] read to 0xffff88823fffad90 of 8 bytes by task 18489 on cpu 0: [ 907.085514][T18489] compact_zone+0x1425/0x1ce0 [ 907.090176][T18489] try_to_compact_pages+0x317/0x840 [ 907.095358][T18489] __alloc_pages_direct_compact+0x61/0x330 [ 907.101151][T18489] __alloc_pages_slowpath+0x2aa/0xbf0 [ 907.106506][T18489] __alloc_pages+0x25b/0x320 [ 907.111079][T18489] alloc_pages+0x382/0x3d0 [ 907.115478][T18489] __get_free_pages+0x8/0x30 [ 907.120050][T18489] io_uring_create+0xa37/0x1980 [ 907.124884][T18489] __x64_sys_io_uring_setup+0xf3/0x130 [ 907.130328][T18489] do_syscall_64+0x44/0xa0 [ 907.134749][T18489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 907.140627][T18489] 01:59:51 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf6, 0x0, 0x0, 0x0, 0x0) [ 907.142934][T18489] value changed: 0x00000000001df600 -> 0x00000000001eb600 [ 907.150014][T18489] [ 907.152318][T18489] Reported by Kernel Concurrency Sanitizer on: [ 907.158443][T18489] CPU: 0 PID: 18489 Comm: syz-executor.0 Tainted: G W 5.14.0-syzkaller #0 [ 907.168226][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.178260][T18489] ================================================================== 01:59:51 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x200000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:51 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xffffffff, 0x54}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r6, 0xffffffffffffffff}, 0x0) r7 = syz_io_uring_setup(0x6e6, &(0x7f00000003c0)={0x0, 0xc332, 0x1, 0x7, 0x4, 0x0, r3}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0xb00a, @fd=r7, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xb7, &(0x7f00000001c0)}, 0xffffffff) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0x0, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b57, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:51 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf7, 0x0, 0x0, 0x0, 0x0) 01:59:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {r3}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:51 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf6, 0x0, 0x0, 0x0, 0x0) 01:59:51 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0)={0x0, 0x405, 0x10, 0x20000001, 0xfffffffe}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000700)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000680)=@caif}, 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/132, 0x84}], 0x1, 0xfffff800, 0x7) lseek(r3, 0x0, 0x0) io_uring_enter(r3, 0x7663, 0x1178, 0x3, &(0x7f0000000140)={[0x1]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000500)="7be934e4409f279d1795799ea60c2507a9caf2240c3d10fba356a21413bff229267455f379122937f786eadc173d8e67d035165cfd39a817b4ed601a660bc5bc64a029f7f0e6d1b8fff68882f83068473405266e10625ba1b55633cc3dfde4f5f9", 0x61, 0x4}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x9, &(0x7f0000000180)=0x0) io_pgetevents(r5, 0x3f, 0x2, &(0x7f0000000200)=[{}, {}], &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x749]}, 0x8}) r6 = gettid() tkill(r6, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:51 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf8, 0x0, 0x0, 0x0, 0x0) 01:59:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:51 executing program 5: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r5, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d40)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x6}, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x7670, &(0x7f0000000180)={0x0, 0x7463, 0x4, 0x2, 0xfff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd=r3, 0xbcf0, 0x0, 0x0, 0x8, 0x0, {0x3}}, 0x1222) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, r3) sendmsg$inet6(r8, &(0x7f0000000b80)={&(0x7f0000000380)={0xa, 0x4e21, 0x6, @private0, 0x40}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000003c0)="67944cc0779add15a1c2c8c4137fdda289fe38e78384c78b1608dcf14bde6c061fafa6d48d26e16ac0b74b113054b389e53c7ac5aceb964a03d10a21f40d8a4194def79f4cd16487da58a5e6947f2b92f94302d4000715cddc3ffcf76b7413d058f48b66c088af57b81f6f4952256402506b651acbcc965fc964b8cdcf1cf56251d4ee64e1e65e644770b961d6ce0e94c0315e4a5c6fa7a1db4f8f9f7800f45e1c896ef8c9c49e9c35268ad8fd3a53ce75f1d509b7369190deaaccad518b81a623da479c8067d2d2007cd91b4daa569ac11c1c23f5fd0d18553ce094e745a67085f386240968ba8fbc060e75", 0xec}, {&(0x7f00000004c0)="d919c236710c1cc79b1d6bdb3d7e7d2c81a4b4345dcc1a743c01f5570b721c0c97bf65b5a61978f37a47cf7faf1a541e0563f19d6b8b28201d659844b16ad4ebc3f5fef15df60b2a2f9f226d05f55c0ec7883667a4a7f55243ec448b0fd1260ab5c4384e03ed3efe6038a61bb4705d11b7b99eaeacb0519f5f63571097f5340e4f5d018fd0d85f9cd94af272996ec87453d65c37f0aa80646c07d15b4945450c78b912738690907582e4f7a0eab76e66cc6eae54", 0xb4}, {&(0x7f0000000580)="a514dd6e023936b678553633e78de20ec3ce3051e59f0affafd688d34aad05d39e3c", 0x22}, {&(0x7f00000005c0)="e8f2c7b5eb71dd42cfce288a9118455437841a701988ff2e93d0448f2118bcaa924968dccf29af1211f466bc2c4104bba79c97353a8c852cfb8b339357739182bb3418e8296e4600456663049cfd81808427227499c5ed9d93d064bc98ec52d57142735607df00ce66b9714674503141f4a5ca7090dbff379f060db97a36", 0x7e}, {&(0x7f0000000640)="6a474fb10981cab76879953388c72a2cf3df13724910f9c59dcb539f23016a2e344d009bb6f285313177dcb5673f495c76623a2efe04d51df7b9c95c909603a2ed2152598f5022e4db41cb683e12f25056cf87a057b1b2c058f4184fdb8add356ae201600f70835497b1ef8153d9656ead4987d149c29aa81692667beda09b37c56f01ff42eeed16799b3267a19a3f4d05e82a07c05f4223b62d8dd102d2a72b0593ae304be7498b0278e56a71a85c23923dc7", 0xb3}, {&(0x7f0000000700)="a7dbd69302f152cbdcb9e2ef65aa2b618fe4311dc47202403ed447b5bf0c04b6e380ad38350518d69dce2f7dbd36b5e1119391de7c12d4cde6bdb7e9e3dcfb6525d8cf7400027b5fa7d51b59a48952117043bbcea9d7e612b5613097c8f4663edf96d1dcb69628e0d39d480076d3d7ffb7123d91459b6fa2b085825353648c535e11595295424dacf1b3306125302cf061cc2822e9697ffd", 0x98}, {&(0x7f00000007c0)="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", 0xff}], 0x7, &(0x7f0000000940)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x1, 0xc5, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x87, 0x28, '\x00', [@enc_lim={0x4, 0x1, 0xf8}, @ra={0x5, 0x2, 0x3}, @generic={0x3, 0x93, "1750ae83ef4fab83ec789322c1e7bdddea98e8a7f68b2bd10ffc467103262b529452287f5eb9d96247464d2c4c3a531bb2b895ccf33ec7cc7b8bfca6d827429bcc6f8e62f40e979e29e19c3fe18fdc61dcdcc0c6e93c1d50144fd3de6f3056ba9108dc6b8c8830ea38fb4122ce2e19c60362902c6a3dde3609cc20f29813b597cfe22c7f6f7759bd8b703c2ba2f26dec8c11a5"}, @jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x48, {0x3, 0x10, 0x4, 0x3, [0x7, 0x4, 0xd1, 0xfffffffffffffffb, 0x9d93, 0x4, 0x1, 0x200]}}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0x7, [0x0, 0x200, 0x3f, 0x7, 0xfff, 0x7fffffff, 0x8, 0xfd2, 0xe4]}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}, @rthdr={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x2, 0x90, 0x0, [@empty, @remote, @empty, @private2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x230}, 0x10004) 01:59:51 executing program 4: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x204000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 01:59:51 executing program 1: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf7, 0x0, 0x0, 0x0, 0x0) 01:59:51 executing program 2: r0 = syz_io_uring_setup(0x648f, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x0, 0x0, "de2508b3df47072568d0c99b4cf518fc61"}], 0x28}}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x34) io_uring_enter(r0, 0xf9, 0x0, 0x0, 0x0, 0x0) 01:59:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r3}, {r2}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, 0x0) fchdir(r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051100)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xe0, "69852b2143d764"}) dup3(r0, 0xffffffffffffffff, 0x80000) io_setup(0xa8f, &(0x7f0000000100)) 01:59:52 executing program 0: r0 = syz_io_uring_setup(0x648f, &(0x7f0000000180), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000000)=0x2, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) clone(0x2004500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() syz_io_uring_setup(0x6e4, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000656000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0xb00a, @fd=r7, 0xffffffffffffffff}, 0x0) r8 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r11}}, 0x0) tkill(r4, 0x34) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) r12 = getpid() sched_setattr(r12, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0x0, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0)